OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-85887

HIGH · CVSS 7.7 EPSS 0.84%

Source: NVD + CISA KEV + EPSS · Published 2026-09-18 · Last synced 2026-10-12

CyberRota Analysis

AI-Generated

A critical resource in M365 Copilot has an incorrect permission assignment, enabling authorized attackers to potentially disclose sensitive information over a network. Organizations utilizing M365 Copilot should prioritize addressing this vulnerability to mitigate the risk of unauthorized information exposure. Immediate action is recommended for businesses that rely on M365 Copilot for handling sensitive data.

CVE
CVE-2026-85887
Severity
HIGH
CVSS
7.7
EPSS
0.84%

Original NVD Description

Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-106420 MEDIUM CVE-2026-106376 MEDIUM CVE-2026-106373 HIGH CVE-2026-106284 MEDIUM CVE-2026-106272 MEDIUM CVE-2026-106258 MEDIUM