CVE-2026-41094

CVE-2026-41094: Improper control of generation of code ('code injection') in Microsoft Data Formulator enables an unauthenticated attacker to execute code over a network. Base CVSS v3.1 score 8.8 (High) with network access, no privileges, user interaction required. Exploitation status is not deta...