Firetruck

CVE-2025-24989

KEV
Updated Feb 13, 2026 · PUBLISHED
View KEV entry →

Description

Microsoft Power Pages contains an improper access control vulnerability that allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Microsoft Power PagesMicrosoft / Microsoft Power Pages-affected