CVE Catalog
CVE-2026-49159
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk1.00%
62th percentile - higher than 62% of all known CVEs
Summary
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
Risk Assessment
The organization risks leakage of sensitive data, which could be used for further attacks or privacy breaches.
Recommendation
Apply security updates provided by Microsoft for Microsoft Graph.
Other vulnerabilities in Microsoft Graph
Original NVD description (English source)
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS