PULSE
ES
FEED
ransomqilin reclama a Via Credit Union · US · Financial Servicesransomn0n reclama a Company #75 · US · Not Foundransomn0n reclama a Company #74 · US · Not Foundransomn0n reclama a Evolution Spine / All Labs · Healthcareransomincransom reclama a fairfeelegalservices.com · US · Professional Servicesransomincransom reclama a verveba.com \ www.att.com · US · Technologyransomincransom reclama a www.coopecaja.fi.cr · CR · Financial Servicesransomincransom reclama a nowaszkola.com · PL · Educationransomqilin reclama a Keio Corporation · JP · Transportationransomqilin reclama a Kemlows Diecasting Products Limited · GB · Manufacturingransomqilin reclama a Telcoe Federal Credit Union · US · Financial Servicesransomwallstreet reclama a TGM Manufacturing, Inc · US · Manufacturingransomqilin reclama a Segres Systec · ES · Technologyransomqilin reclama a Shield Wall Systems of Florida · US · Government & Defenseransomqilin reclama a Via Credit Union · US · Financial Servicesransomn0n reclama a Company #75 · US · Not Foundransomn0n reclama a Company #74 · US · Not Foundransomn0n reclama a Evolution Spine / All Labs · Healthcareransomincransom reclama a fairfeelegalservices.com · US · Professional Servicesransomincransom reclama a verveba.com \ www.att.com · US · Technologyransomincransom reclama a www.coopecaja.fi.cr · CR · Financial Servicesransomincransom reclama a nowaszkola.com · PL · Educationransomqilin reclama a Keio Corporation · JP · Transportationransomqilin reclama a Kemlows Diecasting Products Limited · GB · Manufacturingransomqilin reclama a Telcoe Federal Credit Union · US · Financial Servicesransomwallstreet reclama a TGM Manufacturing, Inc · US · Manufacturingransomqilin reclama a Segres Systec · ES · Technologyransomqilin reclama a Shield Wall Systems of Florida · US · Government & Defense
← All CVEs
CVE Watch—

CVE-2025-24989

Microsoft Power Pages Improper Access Control Vulnerability

CVSS

—

No CVSS

EPSS

1.6%

p76

KEV

YES

Feb 21, 2025

Exploit Today

73

0-100

Published: — · Last modified: —

EPSS · 30d
1.6%EPSS · 30 days1.6%
2026-09-172026-10-15
KEV catalog record

Product

Microsoft / Power Pages

Vulnerability

Microsoft Power Pages Improper Access Control Vulnerability

Added to KEV

Feb 21, 2025

Remediate by

Mar 14, 2025

Known ransomware use

No

Summary description

Microsoft Power Pages contains an improper access control vulnerability that allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control.

Required action

Apply mitigations per vendor instructions, follow BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-24989 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24989

Related CVEs

No related CVEs by CWE or product.