fr Sign in

6.5 Medium

CVE-2026-21512 Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to perform spoofing over a…

Description

Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to perform spoofing over a network.

Affected products and versions

Product	Affected versions	Fixed in
Azure DevOps Server 2022 20230131.0	20230131.0 → < 20260204.3	20260204.3

References

Azure DevOps Server Cross-Site Scripting Vulnerability msrc.microsoft.com

Timeline

Published February 10, 2026
Last modified August 19, 2026

The 8 CVEs of Azure DevOps Server 2022 →

CVE-2024-35267 Azure DevOps Server Spoofing Vulnerability 7.6 High CVE-2024-35266 Azure DevOps Server Spoofing Vulnerability 7.6 High CVE-2024-20667 Azure DevOps Server Remote Code Execution Vulnerability 7.5 High CVE-2023-21751 Azure DevOps Server Spoofing Vulnerability 6.5 Medium

Track this CVE