AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

MicrosoftCVE-2026-62906

Microsoft Discovery Studio: unauthorized attacker could disclose information...

Microsoft

CVE-2026-62906 · Published Sep 3, 2026 · updated Sep 8, 2026

High7.4
No fix yet
Microsoft advisory

Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network.

Affected versions

PackageAffectedFixed in
Microsoft Discovery Studio
Product
all versionsNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-943

More Microsoft advisories

All Microsoft
High 8.5Sep 3Microsoft Fabric: missing authorizationCVE-2026-70178no fix yetCritical 10.0Sep 3Microsoft Azure AI Language Authoring: missing authenticationCVE-2026-70352no fix yetCritical 9.3Sep 3Microsoft Copilot Studio: privilege escalationCVE-2026-80098no fix yetCritical 10.0Sep 3Microsoft Entra: privilege escalationCVE-2026-83711no fix yetCritical 9.1Sep 3Microsoft Entra: authentication bypassCVE-2026-62916no fix yetHigh 8.5Sep 3Microsoft Power Platform: server-side request forgeryCVE-2026-65818no fix yet