CVE-2026-26118
HIGHAzure MCP Server - Authenticated Server-Side Request Forgery
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2026-26118. PoCs published by XiaomingX, SecureWithUmer, j-dahl7.
AI-analyzed exploit summary The repository contains a security scanner for MCP servers that checks for known vulnerability classes, including CVE-2026-26118. It performs various checks such as ping handler, resource list handler, and authentication, but does not include exploit code.
Description
Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.
Exploits (4)
The repository contains a security scanner for MCP servers that checks for known vulnerability classes, including CVE-2026-26118. It performs various checks such as ping handler, resource list handler, and authentication, but does not include exploit code.
This repository provides a comprehensive detection and hunting framework for CVE-2026-26118, an SSRF vulnerability in Azure MCP Server that allows attackers to leak managed identity tokens. The content includes KQL hunting queries, Sentinel analytics rules, and a workbook for detecting MCP attack chains, including identity abuse and tool misuse patterns.
This repository provides a Microsoft Sentinel lab for detecting MCP (Model Context Protocol) attack chains, including CVE-2026-26118 (SSRF token theft). It includes analytics rules, hunting queries, and a workbook for monitoring and detecting attacks.
This repository contains a security scanner for MCP (Model Context Protocol) servers, which checks for known vulnerability classes such as timing DoS, capability assumption attacks, and prompt injection. It does not exploit vulnerabilities but scans for their presence.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H