Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2026-114160: Azure Managed Grafana may let attackers gain higher rights
CVE-2026-114160 · published 1 day ago
Summary
A flaw in Azure Managed Grafana can be used by an outside attacker to make the service contact internal systems it shouldn't. By doing this, the attacker can increase their level of access within your network. Apply the latest updates from Microsoft and review any unusual internal traffic.
What to do
- Update microsoft azure managed grafana to version publication or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | azure managed grafana |
< publication - |
Original advisory text
Azure Managed Grafana Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Azure Managed Grafana allows an unauthorized attacker to elevate privileges over a network.
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114160 vendor-advisory patch
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Type
CWE-918Server-Side Request Forgery (SSRF)
Timeline
Published10 Nov 2026
Updated12 Nov 2026
First seen10 Nov 2026
Track software like this
Free during beta