← Database

CVE-2026-54130

CRITICAL CVSS: 9.8 Published: 2026-06-18 Modified: 2026-06-25

Description

Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Affected Platforms

Microsoft 365 Copilot

Weakness Type

CWE-306

References