CVE-2026-65818

Power Automate is vulnerable to a server-side request forgery (SSRF) flaw that enables authorized attackers to escalate privileges and potentially manipulate network resources. This high-severity vulnerability poses significant risks to organizations utilizing Power Automate for automation tasks, as it could lead to unauthorized access and data exposure. Organizations using this product should prioritize immediate remediation efforts to mitigate potential exploitation.