CVE Catalog
CVE-2026-65818
HighCVSS 8.5Exploitation Probability (EPSS)
Low risk0.33%
26th percentile - higher than 26% of all known CVEs
Summary
Server-side request forgery (SSRF) in Power Automate allows an authorized attacker to elevate privileges over a network.
Risk Assessment
An attacker could use the server to make requests to internal resources, potentially leading to privilege escalation and access to sensitive systems.
Recommendation
Install the latest security patches for Power Automate and restrict network access from the service to internal resources.
Other vulnerabilities in Power Automate
Original NVD description (English source)
Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS