Quick answers
- Is CVE-2026-85917 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-85917 being exploited in the wild.
- How severe is CVE-2026-85917?
- High severity, with a CVSS score of 7.5, published 17 September 2026.
- Which products and versions are affected?
- Microsoft Azure AI Foundry.
- Is there a fix for CVE-2026-85917?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-85917 attacked?
- It is attacked over the network, in a hosted service.
- Am I affected by CVE-2026-85917?
- Check whether you run Microsoft Azure Ai Foundry or Microsoft Foundry. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The vulnerability is a server-side request forgery in Azure AI Foundry that permits privilege escalation over a network from an unauthenticated attacker position. The SSRF flaw allows an attacker to craft requests that the server will execute against internal resources, potentially bypassing authentication controls and accessing restricted endpoints or data. Exploitation requires network access to the affected service.
Affected products
- Microsoft Azure AI Foundry
Timeline
- 2026-09-17: disclosed