CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-41094

Improper control of generation of code ('code injection') in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 21.0%

CVSS Severity

CVSS v3 Score 8.8

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41094

Products affected by CVE-2026-41094

Microsoft » Data Formulator » Version: 0.1.2

cpe:2.3:a:microsoft:data_formulator:0.1.2
Microsoft » Data Formulator » Version: 0.1.3

cpe:2.3:a:microsoft:data_formulator:0.1.3
Microsoft » Data Formulator » Version: 0.1.4

cpe:2.3:a:microsoft:data_formulator:0.1.4
Microsoft » Data Formulator » Version: 0.1.5

cpe:2.3:a:microsoft:data_formulator:0.1.5
Microsoft » Data Formulator » Version: 0.1.5.1

cpe:2.3:a:microsoft:data_formulator:0.1.5.1
Microsoft » Data Formulator » Version: 0.1.6

cpe:2.3:a:microsoft:data_formulator:0.1.6
Microsoft » Data Formulator » Version: 0.1.7

cpe:2.3:a:microsoft:data_formulator:0.1.7
Microsoft » Data Formulator » Version: 0.2

cpe:2.3:a:microsoft:data_formulator:0.2
Microsoft » Data Formulator » Version: 0.5

cpe:2.3:a:microsoft:data_formulator:0.5
Microsoft » Data Formulator » Version: 0.5.1

cpe:2.3:a:microsoft:data_formulator:0.5.1
Microsoft » Data Formulator » Version: 0.6

cpe:2.3:a:microsoft:data_formulator:0.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-41094

Products

Pricing

Contact Us