Is CVE-2026-49159 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-49159?

CVE-2026-49159 has a CVSS v3 severity of MEDIUM (6.5).

Back

Description

Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.