CVE-2026-54130 — Vulnerability intelligence
microsoft — 365 copilot
Published:
- CVSS
- 9.8
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network.