[CVE-2026-62906] Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows…

Descripción técnica

Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network.

Puntuación CVSS

Score: 7.4/10 — Severidad: HIGH — Estado NIST: Received

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

Debilidades (CWE)

CWE-943

Fuente oficial

Publicado en NIST NVD.