Sign in

10.0 Critical

CVE-2026-32186 Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to elevate privileges over a…

Description

Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network.

Affected products and versions

Product	Affected versions	Fixed in
Microsoft Bing	Versions not published

The 4 CVEs of Microsoft Bing →

CVE-2026-33819 Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to execute code over a network 10.0 Critical CVE-2026-26120 Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to perform tampering over a network 6.5 Medium CVE-2025-21355 Missing Authentication for Critical Function in Microsoft Bing allows an unauthorized attacker to execute code over a… 8.6 High

Do you use Microsoft Bing?

Track this CVE Watch Microsoft Bing Check my SBOMs

www.cveye.io/en/cve/CVE-2026-32186

Timeline

Published April 3, 2026
Last modified October 15, 2026

References

Microsoft Bing Elevation of Privilege Vulnerability msrc.microsoft.com

Track this CVE