VULNERABILITY INTELLIGENCE

CVE-2026-50517

CVSS score9.9 CRITICAL

EPSS probability1.69%

CISA KEVNot currently listed

Published2026-07-24

Last modified2026-10-24

Description

Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.