CVE-2026-59118

Microsoft Power Apps Elevation of Privilege Vulnerability

Published 6 Aug 2026 • Updated 7 Aug 2026

Severity: CRITICAL

Description

Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network.

Affected products (1)

• Microsoft Microsoft Power Apps

Problem types

• CWE-285: Improper Authorization

References (1)

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59118