CVE-2026-70213
Awaiting Analysis Awaiting Analysis - Queue

Microsoft Power Apps Origin Validation Error Leads to Remote Code Execution

Publication date: 2026-10-13

Last updated on: 2026-10-13

Assigner: Microsoft Corporation

Description
Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-13
Last Modified
2026-10-13
Generated
2026-10-14
AI Q&A
2026-10-13
EPSS Evaluated
N/A
NVD
CVE-2026-70213
EUVD
EUVD-2026-99610

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
Microsoft Microsoft Power Apps 1710 (9.2.23071.136)
Microsoft Microsoft Power Apps for Android 1.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-346 The product does not properly verify that the source of data or communication is valid.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an origin validation error in Microsoft Power Apps. An authorized attacker can exploit it to execute code over a network, potentially leading to unauthorized actions or data access.

Impact Analysis

If you use Microsoft Power Apps, an attacker could gain control over your app or data. This may result in data breaches, unauthorized modifications, or further network compromise depending on user permissions.

Compliance Impact

This vulnerability could lead to unauthorized data access or exposure, violating GDPR (data protection) and HIPAA (health data privacy). Organizations may face fines or legal consequences if affected systems handle regulated data.

Mitigation Strategies

Apply the latest security updates from Microsoft for Power Apps. Disable unnecessary network access to Power Apps services. Monitor network traffic for unusual activity related to Power Apps. Restrict user permissions to reduce attack surface.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-70213. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart