1132 matches found
@agentholdings/agent-passport (0.1.0), @themw123/opencode-copilot-account-switcher (>=0.14.39, <=0.14.42) +3 more potentially affected by CVE-2026-35660 via openclaw (2026.3.22)
openclaw NPM version 2026.3.22 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @agentholdings/agent-passport 0.1.0 - @themw123/opencode-copilot-account-switcher =0.14.39, =0.1.1, =0.14.6, =0.1.0, =0.1.5 Source cves:...
@agentholdings/agent-passport (0.1.0), @themw123/opencode-copilot-account-switcher (>=0.14.39, <=0.14.42) +3 more potentially affected by CVE-2026-35634 via openclaw (2026.3.22)
openclaw NPM version 2026.3.22 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @agentholdings/agent-passport 0.1.0 - @themw123/opencode-copilot-account-switcher =0.14.39, =0.1.1, =0.14.6, =0.1.0, =0.1.5 Source cves:...
CVE-2026-24299
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an unauthorized attacker to disclose information over a network...
CVE-2026-26136
Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...
CVE-2026-26137
Server-side request forgery ssrf in Microsoft 365 Copilot's Business Chat allows an authorized attacker to elevate privileges over a network...
CVE-2026-26133
AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network...
The vulnerability of the Business Chat function in the Microsoft 365 Copilot intelligent virtual assistant allows a hacker to escalate their privileges.
The vulnerability of the Business Chat function in Microsoft 365 Copilot is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...
Secure agentic AI end-to-end
Next week, RSAC™ Conference celebrates its 35-year anniversary as a forum that brings the security community together to address new challenges and embrace opportunities in our quest to make the world a safer place for all. As we look towards that milestone, agentic AI is reshaping industries...
EUVD-2026-13182
Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...
EUVD-2026-13178
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an unauthorized attacker to disclose information over a network...
EUVD-2026-13184
Server-side request forgery ssrf in Microsoft 365 Copilot's Business Chat allows an authorized attacker to elevate privileges over a network...
CVE-2026-26137
Server-side request forgery ssrf in Microsoft Exchange allows an authorized attacker to elevate privileges over a network...
CVE-2026-26136
Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...
CVE-2026-24299
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an unauthorized attacker to disclose information over a network...
CVE-2026-26137 Microsoft Exchange Elevation of Privilege Vulnerability
...
CVE-2026-26137 Microsoft Exchange Elevation of Privilege Vulnerability
...
CVE-2026-26137
CVE-2026-26137 is described as a server-side request forgery (SSRF) that affects Microsoft Exchange (and related Microsoft 365 Copilot/Business Chat contexts in linked sources). The available documents state that an authorized attacker can elevate privileges over a network, with the CVSS 3.1 scor...
CVE-2026-26137
Server-side request forgery ssrf in Microsoft Exchange allows an authorized attacker to elevate privileges over a network...