Microsoft’s security trackers show a new entry for CVE-2026-21520 — an information‑disclosure vulnerability affecting Cotheilot Studio — but public technical details are intentionally sparse and the vendor record currently provides more affirmation of existence than a full exploit recipe...
