CVE-2026-70213

HighCVSS 8.0

Published: 13/10/2026(UTC)Updated: 16/10/2026(UTC)Translated: 14/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

23th percentile - higher than 23% of all known CVEs

Summary

Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network.

Risk Assessment

An attacker could exploit the vulnerability to execute malicious code in the context of the application, potentially leading to data or service compromise.

Recommendation

Update Power Apps to the latest version and configure appropriate security policies for the application.

Other vulnerabilities in Microsoft Power Apps

CVE-2026-26149Critical
Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allows an authorized attacker to perform spoofing over a network.

Original NVD description (English source)

Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS