CVE-2026-32173

Microsoft · Published April 2, 2026

8.6

CVSS v3.1

HIGH

Patch availableGet patch

Description

Azure SRE Agent Information Disclosure Vulnerability. Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network.

Affected Products

Azure SRE Agent Gateway - SignalR Hub

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C