PT-2026-26357 · Microsoft · Purview

Evan Grant + 1 · Publicado 2026-03-19 · Atualizado 2026-03-31 · CVE-2026-26139

Positive Technologies (AI Summary)

CVSS v3.1

8.6

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Purview (affected versions not specified)

Description The software contains a server-side request forgery (ssrf) issue. This allows an unauthorized attacker to elevate privileges over a network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

BDU:2026-04691

CVE-2026-26139

Produtos afetados

Purview

Referências · 9

• https://twitter.com/ptdbugs/status/2034884024896806994 · Publicação no Twitter
• https://twitter.com/RedPacketSec/status/2034870889343332728 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-26139 · Nota de Segurança
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26139 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2026-04691 · Nota de Segurança
• https://twitter.com/rahsi_aaka/status/2038846903174201649 · Publicação no Twitter
• https://twitter.com/CveFindCom/status/2034747465874710586 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2035627051164606921 · Publicação no Twitter
• https://twitter.com/rahsi_aaka/status/2038848232059814037 · Publicação no Twitter