Improper authentication in Azure DevOps allows an authorized attacker to execute code over a network.
Read the full article at Microsoft Security Response Center →
CVE-2026-109467 Azure DevOps Server Remote Code Execution Vulnerability
About this summary. This is a short excerpt from the description that Microsoft Security Response Center published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109467
Source attribution: headline and facts are from Microsoft Security Response Center (msrc.microsoft.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
NCSC-2026-0473 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Developer Tools
Microsoft heeft kwetsbaarheden verholpen in diverse Developer Tools. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot…
CVE-2026-105014 Azure Pipelines Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network.
CVE-2026-114151 Visual Studio Remote Code Execution Vulnerability
Updated the products listed in the Security Updates table. This is an informational change only.
CVE-2026-114152 Visual Studio Remote Code Execution Vulnerability
Updated the products listed in the Security Updates table. This is an informational change only.
CVE-2026-114158 Visual Studio Remote Code Execution Vulnerability
Updated the products listed in the Security Updates table. This is an informational change only.
CVE-2026-114159 Visual Studio Remote Code Execution Vulnerability
Updated the products listed in the Security Updates table. This is an informational change only.