CVE-2026-26149 - Vulnerability Analysis

Overview

Microsoft Power Apps contains a security feature bypass caused by improper neutralization of escape, meta, or control sequences, letting authorized attackers bypass security over a network, exploit requires attacker authorization.

Severity & Score

Impact

Authorized attackers can bypass security features over a network, potentially compromising application integrity.

Mitigation

Update to the latest version of Microsoft Power Apps.

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26149

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner