CVE-2026-40374
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
May 12, 2026
Vendor
unknown
Description
Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose information over a network.