GCVE-110-NCSC-2026-290

Advisory PublishedCVSS 8.8/10

Vulnetix · Advisory published August 11, 2026

Improper input validation in Power BI allows an authorized attacker to remotely execute code over a network, posing significant security risks.

Risk Scores

CVSS 3.1

8.8/10

High · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Vendor	Product	Versions	Platforms
Microsoft	vers:unknown/*	—	—

advisory

805 records in the GCVE database · Updated September 2, 2026

No matching records found.

Investigate this vulnerability in the interactive console or download the raw GCVE record.