← Database

CVE-2026-40374

MEDIUM CVSS: 6.5 Published: 2026-05-12 Modified: 2026-06-17

Description

Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose information over a network.

Affected Platforms

Microsoft Power Automate For Desktop

Weakness Type

CWE-200

References