CVE-2026-69855 - Exploits & Severity

Back Feedly

CVE-2026-69855 - Exploits & Severity

Feedly • August 21, 2026

Share: View original

Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to disclose information over a network.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Feedly found the first article mentioning CVE-2026-69855 . See article

NVD published the first details for CVE-2026-69855

GitHub Advisories released a security advisory .

Microsoft Copilot in Azure Information Disclosure Vulnerability

CVE-2026-69855 - Microsoft Copilot in Azure Information Disclosure Vulnerability

CVE-2026-69855 | Microsoft Copilot server-side request forgery

Cybersecurity News, Tools, Insights, and Analysis

Collect, analyze, and vulnerability reports faster using AI

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CVE-2026-69855: Microsoft Copilot SSRF Vulnerability Disclosed A server-side request forgery (SSRF) vulnerability, identified as CVE-2026-69855, has been discovered in Microsoft Copilot in Azure. This flaw allows authorized attackers to disclose sensitive information over a network. The vulnerability has been rated with a severity score of 7.7, classified as high. Affected systems include various versions of Microsoft Copilot in Azure, although specific versions were not detailed in the reports. The vulnerability was published on August 20, 2026, and has been acknowledged by multiple cybersecurity sources. Current advisories recommend monitoring for potential exploits and applying necessary mitigations. No active exploits have been reported yet, but the potential for information disclosure poses a significant risk. 1 sources 60

Extracted Entities

Attack Types (1)

Server-Side Request Forgery (ssrf)

Companies (1)

CVEs (1)

CWE Weaknesses (2)

CWE-200 - Exposure of Sensitive Information CWE-918 - Server-Side Request Forgery (ssrf)

MITRE ATT&CK (1)

T1190 - Exploit Public-Facing Application