Sign in

9.1 Critical

CVE-2026-32211 Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information…

Description

Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network.

Affected products and versions

Product	Affected versions	Fixed in
Azure Web Apps	Versions not published

The 3 CVEs of Azure Web Apps →

CVE-2026-65816 Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over… 10.0 Critical CVE-2024-38194 An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges… 8.4 High

Do you use Azure Web Apps?

Track this CVE Watch Azure Web Apps Check my SBOMs

www.cveye.io/en/cve/CVE-2026-32211

Timeline

Published April 2, 2026
Last modified October 15, 2026

References

Azure MCP Server Information Disclosure Vulnerability msrc.microsoft.com

Track this CVE