CVE-2026-65811
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
Improper input validation in Power BI allows an authorized attacker to execute code over a network.
Risk Assessment
An authorized user could exploit the vulnerability to execute code remotely in the Power BI environment.
Recommendation
Apply security patches provided by Microsoft for Power BI.
Other vulnerabilities in Power BI
See all- CVE-2026-58647High
A cross-site scripting (XSS) vulnerability in Power BI allows an authorized attacker to perform spoofing over a network. The flaw is caused by improper neutralization of input during web page generation.
- CVE-2021-31984High
Remote code execution vulnerability in Power BI. Allows an attacker to execute code in the context of the service.
Original NVD description (English source)
Improper input validation in Power BI allows an authorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS