CVE-2026-62906: Microsoft Discovery Studio

High severity, CVSS 7.4. EPSS: 0.9% chance of exploitation in the next 30 days.

Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network.

Affected products

• Microsoft Microsoft Discovery Studio: affected versions not specified

Published 2026-09-03. Last modified 2026-09-08.