Oct 2026: Microsoft Power Apps Remote Code Execution Vulnerability
CVE-2026-70213 Published on October 13, 2026

Microsoft Power Apps Remote Code Execution Vulnerability
Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network.

Vendor Advisory NVD

Weakness Type

Origin Validation Error

The software does not properly verify that the source of data or communication is valid.


Products Associated with CVE-2026-70213

stack.watch emails you whenever new vulnerabilities are published in Microsoft Power Apps For Android or Microsoft Power Apps. Just hit a watch button to start following.

 
 

Affected Versions

Microsoft Power Apps: Microsoft Power Apps for Android: