7.4 High

CVE-2026-62906 Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized…

Description

Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network.

Affected products and versions

Product	Affected versions	Fixed in
Microsoft Discovery Studio	Versions not published

Do you use Microsoft Discovery Studio?

Track this CVE Watch Microsoft Discovery Studio Check my SBOMs

www.cveye.io/en/cve/CVE-2026-62906

Timeline

Published September 3, 2026
Last modified October 31, 2026

References

Microsoft Discovery Studio Information Disclosure Vulnerability msrc.microsoft.com

Track this CVE