HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-65818 — Server-side request forgery (ssrf) in Power Automate allows an authorized attack...

·Source: NIST NVD

Updated:

Executive Summary

Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network.

Analysis

Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network. CVSS Score: 8.5. Published: 2026-09-03T23:17:19.817.

Indicators of Compromise (1)

CVE (1)
CVE-2026-65818
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Sep 3, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-87931 — A vulnerability has been found in Behavioral Technology Group Pavlok Behavioral ...

A vulnerability has been found in Behavioral Technology Group Pavlok Behavioral Conditioning Wearable up to 20260707. Impacted is an unknown function of the component Apple Notification Center Service Event Handler. The manipulation leads to buffer overflow. The attack must be carried out from within the local network. The vendor was contacted early about this disclosure but did not respond in any

CVE-2026-87931
NIST NVD
MEDIUMVulnerability

World Bank targets more digital payments in emerging markets

Mastercard and Visa are backing a new World Bank risk sharing initiative to help local financial institutions expand digital payments in emerging markets.

Finextra
MEDIUMVulnerability

US Bank pilots custom-built stablecoin

US Bank has executed of a live intrabank pilot transaction between North America and Europe that utilised the bank's proprietary US dollar-backed stablecoin, USBDC.

Finextra