cve-2026-26129

  1. CVE-2026-26129: Critical Info Leak Fixed in Microsoft 365 Copilot Business Chat

    Microsoft disclosed CVE-2026-26129 on May 7, 2026, as a critical information disclosure vulnerability in Microsoft 365 Copilot’s Business Chat, saying an unauthorized network attacker could exploit improper neutralization of special elements to disclose information, with no customer action...