CVE-2026-69877: Azure DevOps Information Disclosure Vulnerability
Published Oct 13, 2026
·Updated
Azure DevOps Information Disclosure Vulnerability
Other sources
Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.
— Microsoft
Affected Software
1 affected component
Microsoft Azure DevOps
Event History
Oct 13, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
DescriptionSeverity
Frequently Asked Questions
1
Does exploitation require an attacker to authenticate or have existing permissions?
No. The vector indicates no privileges are required, and the attack can be conducted over a network. Exploitation does require user interaction.
2
What is the expected security impact if exploitation succeeds?
The reported impact is high confidentiality impact. No integrity or availability impact is indicated in the supplied vector.