Which are the "Security updates" in Power BI Report Server september 2025

[vcarazo]

The version september 2025 of Power BI Report Server has been released.

In the changelog page is said:

• Power BI Report Server

  • Version: 1.24.9392.34333 (build 15.0.1119.107), Released: September 22, 2025
  • Fixed issue where custom authentication didn't re-authenticate upon cookie expiration
  • Fixed issue with exporting Power BI visual to excel caused an error
  • Resolved several accessibility issues
  • Custom Visual API shipped with release - version v5.10.0
  • Security updates

Which are this "Security updates"?

[Poojara_D12]

Hi @vcarazo 

Microsoft’s release notes for Power BI Report Server version 1.24.9392.34333 (Sept 22 2025) include a general bullet labelled “Security updates”, but they do not provide a detailed breakdown of which specific vulnerabilities or patches are included.

Here’s what you can do to gain further clarity:

• Check the Microsoft Security Update Guide or Security Advisories for the time period around September 2025 to see if there are any CVEs (Common Vulnerabilities and Exposures) that reference Power BI Report Server.

• Search for any public Microsoft KB articles that correspond to build 15.0.1119.107 (the build number in this release) — sometimes these articles list detailed patch contents.

• Review the server’s own update history (Windows Updates) and logs — especially if you’re running on a Windows Server, the patch summary in the “View installed updates” section may show which security patches were applied.

[Nasif_Azam · Accepted solution]

Hey @vcarazo ,

The term “Security updates” in the September 2025 release of Power BI Report Server (version 1.24.9392.34333) refers to Microsoft’s standard practice of including fixes for potential vulnerabilities and hardening the product against known security risks. So far I know, Microsoft does not publish detailed CVE identifiers or descriptions for these updates in the public changelog unless they address a specific disclosed vulnerability.

For this release, the changelog only states “Security updates” without listing individual CVEs, which means:

The September 2025 update for Power BI Report Server includes internal security improvements and patches to maintain compliance and defend against potential attack vectors. No new CVEs have been reported for the product so far in 2025. Microsoft typically bundles these security fixes into cumulative updates and only discloses detailed information if a critical vulnerability requires a public advisory.

For Detailed Information:

Power BI Report Server Changelog

Power BI Report Server September 2025 Feature Summary

Power BI Report Server Vulnerability Stats

Best Regards,
Nasif Azam