42
35
30
ZDI-26-704: (0Day) Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability
ZDI disclosed an unpatched SSRF information disclosure flaw (CVE-2026-92204, CVSS 7.7) in Airbyte's OneDrive connector, requiring authentication.
ZDI-26-704 describes a server-side request forgery vulnerability in the _get_shared_drive_object function of Airbyte's OneDrive connector. Remote authenticated attackers can initiate arbitrary server-side requests leading to information disclosure. The flaw scores CVSS 7.7, is tracked as CVE-2026-92204, and is published as a 0day advisory without a referenced fix.
38
42
47
30
60
Microsoft Rolls Out Patches for 80 New Security Flaws — Two Under Active Attack
60
42
42
April 2020 Patch Tuesday: Microsoft fixes three actively exploited vulnerabilities
60
60
42
60
42
60
42
42
60
60
60
47
55
42
60
January 2026 CVE Landscape: 23 Critical Vulnerabilities Mark 5% Increase, APT28 Exploits Microsoft Office Zero
60
60
47
60
Microsoft Patch Tuesday, December 2025 Edition
60
30
30
Patch Tuesday, October 2025 ‘End of 10’ Edition
60
42
55
30
Microsoft Releases Urgent Patch for SharePoint RCE Flaw Exploited in Ongoing Cyber Attacks
60
55
47