CVE-2026-109467

Microsoft Azure DevOps

Medium priority: severe, but no known exploitation

Improper authentication in Azure DevOps allows an authorized attacker to execute code over a network.

In the news

• Boletín de seguridad de Microsoft de noviembre de 2026 · INCIBE-CERT