{"affected":[{"product":"Azure Managed Grafana","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"status":"affected","version":"-"}]}],"cveId":"CVE-2026-114160","cwes":["CWE-918"],"description":"Server-side request forgery (ssrf) in Azure Managed Grafana allows an unauthorized attacker to elevate privileges over a network.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":9.8,"severity":"critical","source":"CNA: microsoft","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","version":"3.1"}],"modifiedAt":1794361499061,"publishedAt":1794334845229,"references":[{"source":"CNA: microsoft","tags":["vendor-advisory","patch"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114160"}],"remediation":[{"kind":"fix","source":"CNA: microsoft","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114160"}],"revision":"ac5f8f244dd648d6cefb4affd772e1612b9576a4faf278d1d1166ca316fa5745","sources":[{"modifiedAt":1794361499061,"name":"CNA: microsoft","retrievedAt":1794362899476,"url":"https://www.cve.org/CVERecord?id=CVE-2026-114160"}],"ssvc":{"assessedAt":1794361078462,"automatable":"yes","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Azure Managed Grafana Elevation of Privilege Vulnerability","updatedAt":1794362899476}