MSRC_CVE-2026-21229

MSRC_CVE-2026-21229 PUBLISHED CVSS 8 HIGH

Record from circl · Published February 10, 2026

Risk scores

CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected products

Vendor	Product	Versions
	Power BI Report Server <15.0.1120.113
	Power BI Report Server 15.0.1120.113
	Power BI Report Server 1.25.9508.3237
	Power BI Report Server <1.25.9508.3237

Timeline

Feb 10, 2026 CVE Published
Aug 19, 2026 CVE Updated
Nov 1, 2026 Security Advisory (2 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln MSRC_CVE-2026-21229
vulnetix vdb fixes MSRC_CVE-2026-21229

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/MSRC_CVE-2026-21229/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21229 advisory
https://msrc.microsoft.com/csaf/advisories/2026/msrc_cve-2026-21229.json advisory
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1 url
https://support.microsoft.com/lifecycle url
https://www.first.org/cvss url
https://learn.microsoft.com/en-us/power-bi/report-server/changelog fix

Look up in the Resolve Platform →