Findings

CVE-2026-32186

Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network.

Published Apr 3, 2026 · updated Jul 24, 2026 · microsoft bing

Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 3, 2026 · NIST NVD

    Detected

    Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network.

  2. Jul 24, 2026 · NIST NVD

    Updated

    Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network.

Affected

  • cpe microsoft/bingversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-32186

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-32186

    Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network.

    nvd.nist.gov

References