Microsoft Power BI Remote Code Execution Vulnerability

Vulnerability

A remote code execution vulnerability has been identified in Power BI due to improper input validation. This issue allows an authorized attacker to execute code over a network with the privileges of the authenticated user.

Impact

Exploitation of this vulnerability could lead to remote code execution on the affected system.

Remediation

Users are advised to download the security update for Power BI Report Server from the Microsoft Download Center. For more information, consult the release notes and knowledge base articles available on the Microsoft Learn website.

Added: Feb 10, 2026, 8:00 PM
Updated: Feb 11, 2026, 2:14 AM

Vulnerability Rating

Custom Algorithm
spread
0.8
impact
2.5
exploitability
4.8
remediation
7.7
relevance
3.0
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.