https://pwn.watch/i/microsoft-power-pages-cve-2025-24989 Microsoft Power Pages contains an improper access control vulnerability that allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control. Added to CISA KEV on 2025-02-21. en Fri, 21 Feb 2025 00:00:00 GMT https://pwn.watch/i/microsoft-power-pages-cve-2025-24989 https://pwn.watch/i/microsoft-power-pages-cve-2025-24989#2025-02-21-f0f3c515 Fri, 21 Feb 2025 00:00:00 GMT high <p>Microsoft Power Pages: Power Pages Improper Access Control Vulnerability: CISA added CVE-2025-24989 to the KEV catalog (due 2025-03-14).</p>