Skip to content
OpenAdvisories

Product · Microsoft

Azure DevOps

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-109467

    Azure DevOps Server Remote Code Execution Vulnerability

    Improper authentication in Azure DevOps allows an authorized attacker to execute code over a network.

    Microsoft Azure DevOps Azure DevOps Server 2025
  • Critical 10.0
    CVE-2026-42826 Public exploit

    Azure DevOps Information Disclosure Vulnerability

    Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthorized attacker to disclose information over a network.

    Microsoft Azure DevOps
  • Critical 9.0
    CVE-2025-47158

    Azure DevOps Server Elevation of Privilege Vulnerability

    Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.

    Microsoft Azure DevOps
  • Critical 10.0
    CVE-2025-29813

    Azure DevOps Elevation of Privilege Vulnerability

    Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.

    Microsoft Azure DevOps