Sign in

7.5 High

CVE-2026-26121 Server-side request forgery (ssrf) in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a…

Description

Server-side request forgery (ssrf) in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network.

Affected products and versions

Product	Affected versions	Fixed in
Azure IoT Explorer 0.15	earliest → < 0.15.14	0.15.14

The 5 CVEs of Azure IoT Explorer →

CVE-2026-23662 Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose… 7.5 High CVE-2026-23661 Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose… 7.5 High CVE-2026-23664 Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized… 7.5 High CVE-2026-21528 Binding to an unrestricted ip address in Azure IoT Explorer allows an unauthorized attacker to disclose information over… 6.5 Medium

Do you use Azure IoT Explorer?

Track this CVE Watch Azure IoT Explorer Check my SBOMs

www.cveye.io/en/cve/CVE-2026-26121

Timeline

Published March 10, 2026
Last modified June 19, 2026

References

Azure IOT Explorer Spoofing Vulnerability msrc.microsoft.com

Track this CVE