Raw MCP Is Board-Level Risk: Azure CVE-2026-26118 and CVE-2026-12349 Prove It
March Patch Tuesday hit Azure MCP with SSRF and auth bypass. Here's what to fix and how.
Mar 17, 20264 min read
Command Palette
Search for a command to run...
#azure
Articles tagged with #azure
March Patch Tuesday MCP CVEs: Board-Level Risk Assessment
CVE-2026-26118 (Azure MCP, CVSS 8.8) joins a 30-CVE-in-60-days pattern. What your security team needs to tell the board.
Mar 16, 20264 min readCVE-2026-12349: Azure Arc MCP CVSS 9.1 - What Enterprise Teams Need to Know
A critical SSRF vulnerability in Azure Arc's MCP integration scores CVSS 9.1. Remediation steps and architecture alternatives.
Mar 15, 20265 min read