Sign in

10.0 Critical

CVE-2026-42826 Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthorized attacker to disclose…

Description

Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthorized attacker to disclose information over a network.

Affected products and versions

Product	Affected versions	Fixed in
Azure DevOps	Versions not published

The 3 CVEs of Azure DevOps →

CVE-2025-47158 Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges… 9.0 Critical CVE-2025-29813 Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges… 10.0 Critical

Do you use Azure DevOps?

Track this CVE Watch Azure DevOps Check my SBOMs

www.cveye.io/en/cve/CVE-2026-42826

Timeline

Published May 7, 2026
Last modified August 10, 2026

References

Azure DevOps Information Disclosure Vulnerability msrc.microsoft.com

Track this CVE