Vulnerability Details CVE-2026-26149
Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allows an authorized attacker to perform spoofing over a network.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 22.0%
CVSS Severity
CVSS v3 Score 9.0
Products affected by CVE-2026-26149
-
cpe:2.3:a:microsoft:power_apps:-
-
cpe:2.3:a:microsoft:power_apps:3.25121