CVE Catalog

CVE-2026-70178

HighCVSS 8.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.41%

35th percentile - higher than 35% of all known CVEs

Summary

Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.

Risk Assessment

An authorized attacker can elevate privileges, potentially leading to unauthorized access to data or administrative functions in Microsoft Fabric.

Recommendation

Apply security updates provided by Microsoft for Microsoft Fabric and review permission configurations.

Other vulnerabilities in Microsoft Fabric

See all
Original NVD description (English source)

Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS