8.8
High
CVE-2026-41094 Improper control of generation of code ('code injection') in Microsoft Data Formulator allows an unauthorized attacker…
Description
Improper control of generation of code ('code injection') in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Data Formulator 0.7 | earliest → < 0.7 | 0.7 |
References
- Microsoft Data Formulator Remote Code Execution Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified