Microsoft Azure DevOps

3 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-42826-Azure DevOps Information Disclosure VulnerabilityCRITICAL 10.00.8 %
CVE-2025-47158-Azure DevOps Server Elevation of Privilege VulnerabilityCRITICAL 9.00.8 %
CVE-2025-29813-Azure DevOps Elevation of Privilege VulnerabilityCRITICAL 10.01.8 %