CVE Catalog
CVE-2026-23652
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk0.58%
44th percentile - higher than 44% of all known CVEs
Summary
Improper neutralization of special elements used in a command (command injection) in Microsoft Power Pages allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker can remotely execute arbitrary commands on the server, potentially leading to full system compromise.
Recommendation
Apply security updates from Microsoft for Power Pages.
Original NVD description (English source)
Improper neutralization of special elements used in a command ('command injection') in Microsoft Power Pages allows an unauthorized attacker to execute code over a network.