A vulnerability identified as critical has been detected in Microsoft Purview. Affected by this vulnerability is an unknown functionality. The manipulation leads to server-side request forgery.

This vulnerability is uniquely identified as CVE-2026-26138. The attack is possible to be carried out remotely. No exploit exists.

This product is a managed service, so users are unable to manage vulnerability countermeasures on their own.