Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-03-19 · source-backed
Token Security researcher Ariel Simon will present at RSAC 2026 a vulnerability chain starting from SSRF in Microsoft's Azure MCP server (CVE-2026-26118, CVSS 8.8). The managed identity token included in outbound MCP requests is capturable without admin access, then escalatable to full Azure tenant takeover. Defense: isolate MCP server processes from IMDS endpoints and apply network egress filtering blocking [redacted]. Yahoo Finance / GlobeNewswire
Each link below shares sources, entities, or timing with this story.
Token Security criticizes Azure MCP / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Token Security criticizes Azure MCP); both cover Ariel Simon, Azure, Azure MCP, CVE; cite the same source (Yahoo Finance / GlobeNewswire).
Microsoft released Azure MCP / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Microsoft released Azure MCP); both cover Azure, Azure MCP, CVE, CVSS; overlapping topics (azure, chain, full, server).
Token Security criticizes Azure MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Token Security criticizes Azure MCP); both cover Azure MCP, GlobeNewswire, MCP, MCPwned; overlapping topics (azure, chain, server).
Microsoft released Azure MCP / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Microsoft released Azure MCP); both cover Azure, GlobeNewswire, MCP, Microsoft; cite the same source (Yahoo Finance / GlobeNewswire).
Ariel Simon criticizes Azure / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Ariel Simon criticizes Azure); both cover Azure, CVE, CVSS, MCP; overlapping topics (access, azure, cve-2026-26118, server).
Microsoft released Azure MCP / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Microsoft released Azure MCP); both cover CVE, MCP, Microsoft, SSRF; overlapping topics (access, apply).
Microsoft released Azure MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Microsoft released Azure MCP); both cover CVE, CVSS, MCP, Microsoft; overlapping topics (chain, credential, server).
Microsoft released Azure MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Microsoft released Azure MCP); both cover CVE, CVSS, MCP, Microsoft; overlapping topics (chain, server).