Skip to content
PrivacyHigh

CVE-2026-32207: Improper neutralization of input during web page generation ('cross-site scripting') in Azure Machin…

Occurred
May 7, 2026
Published
May 7, 2026
Source
NVD CVE

Summary

Improper neutralization of input during web page generation ('cross-site scripting') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network.

Tags

  • CVE
  • CVE-2026-32207
  • cvss:HIGH

Classification

Category confidence: 85%
Severity confidence: 90%

Rationale: CVE describes a cross-site scripting vulnerability in Azure ML allowing unauthorized spoofing, which is a security breach.

Classifier: Qwen/Qwen3.5-35B-A3B-FP8

Visit source