Skip to content
Sign in
10.0 Critical

CVE-2026-23652 Improper neutralization of special elements used in a command ('command injection') in Microsoft Power Pages allows an…

Description

Improper neutralization of special elements used in a command ('command injection') in Microsoft Power Pages allows an unauthorized attacker to execute code over a network.

Affected products and versions

Product Affected versions Fixed in
Microsoft Power Pages Versions not published

Other CVEs of Microsoft Power Pages

The 3 CVEs of Microsoft Power Pages →
CVE-2025-47733 Server-Side Request Forgery (SSRF) in Microsoft Power Apps allows an unauthorized attacker to disclose information… 9.1 Critical CVE-2025-24989 Microsoft Power Pages Improper Access Control Vulnerability 8.2 High
Track this CVE