Product:
Power Apps
Summary
Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a network. This vulnerability can lead to significant impacts on confidentiality, integrity, and availability. Attackers with low privileges can exploit this issue, making it a serious concern for users.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8 | CVE-2026-20960 |
Exploitation
To exploit this vulnerability, an attacker must have authorized access to Microsoft Power Apps. By leveraging this access, the attacker can execute arbitrary code over the network, potentially compromising sensitive data and system integrity. User interaction is required for the attack to succeed, which may involve tricking the user into performing specific actions.
Affected Products
- Microsoft Power Apps: A platform for building custom applications that can be affected by improper authorization vulnerabilities.
Mitigation
To mitigate this vulnerability, users should ensure that they are using the latest version of Microsoft Power Apps and apply any available security updates. Additionally, organizations should review their access controls and user permissions to limit exposure to potential exploitation.