power_pages vulnerabilities

CVEs whose affected-version data names the power_pages package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-23652Critical· 10.0

Improper neutralization of special elements used in a command ('command injection') in Microsoft Power Pages allows an unauthorized attacker to execute code over a network.

Improper neutralization of special elements used in a command ('command injection') in Microsoft Power Pages allows an unauthorized attacker to execute code over a network.

▾ Midnightmicrosoft · power_pagesEPSS 0.58%via NVD

power_pages vulnerabilities (CVEs) · VulnSea