CVE-2026-100550

OpenClaw npm package 'openclaw' before 2026.8.1 contains an access-control bypass in the Microsoft Teams integration. When groupPolicy is set to allowlist, a missing or unsupported configured access group produces a denied group-resolution result that is not rejected by the final message-admissio...

CVE-2026-100550 OpenClaw before 2026.8.1 Authentication Bypass via Access Group

OpenClaw npm package 'openclaw' before 2026.8.1 contains an access-control bypass in the Microsoft Teams integration. When groupPolicy is set to allowlist, a missing or unsupported configured access group produces a denied group-resolution result that is not rejected by the final message-admissio...

CVE-2026-100550 OpenClaw before 2026.8.1 Authentication Bypass via Access Group

OpenClaw npm package 'openclaw' before 2026.8.1 contains an access-control bypass in the Microsoft Teams integration. When groupPolicy is set to allowlist, a missing or unsupported configured access group produces a denied group-resolution result that is not rejected by the final message-admissio...

CVE-2026-100550

OpenClaw npm package 'openclaw' before 2026.8.1 contains an access-control bypass in the Microsoft Teams integration. When groupPolicy is set to allowlist, a missing or unsupported configured access group produces a denied group-resolution result that is not rejected by the final message-admissio...

CVE-2026-100550

The OpenClaw npm package (openclaw) prior to version 2026.8.1 is vulnerable to an access-control bypass within its Microsoft Teams integration . When groupPolicy is configured to use an allowlist, a missing or unsupported access group generates a denied group-resolution result. Because this resul...

EUVD-2026-87500

OpenClaw npm package 'openclaw' before 2026.8.1 contains an access-control bypass in the Microsoft Teams integration. When groupPolicy is set to allowlist, a missing or unsupported configured access group produces a denied group-resolution result that is not rejected by the final message-admissio...

CVE-2026-100550 OpenClaw before 2026.8.1 Authentication Bypass via Access Group

OpenClaw npm package 'openclaw' before 2026.8.1 contains an access-control bypass in the Microsoft Teams integration. When groupPolicy is set to allowlist, a missing or unsupported configured access group produces a denied group-resolution result that is not rejected by the final message-admissio...

CVE-2026-100681: Server-Side Request Forgery (SSRF)

Budibase before 3.45.0 contains an unauthenticated server-side request forgery and credential exfiltration vulnerability in the Microsoft Teams webhook endpoint that accepts forged Bot Framework activities with arbitrary serviceUrl values. Attackers can submit a crafted POST request to inject an...

PT-2026-99352

Name of the Vulnerable Software and Affected Versions Budibase versions prior to 3.45.0 Description An unauthenticated server-side request forgery SSRF and credential exfiltration issue exists in the Microsoft Teams webhook endpoint. The system accepts forged Bot Framework activities containing...

PT-2026-99187

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.8.1 Description An access-control bypass exists in the Microsoft Teams integration. When the groupPolicy is configured as allowlist, a missing or unsupported access group results in a denied group-resolution tha...

CVE-2026-100550: Incorrect Authorization

OpenClaw npm package 'openclaw' before 2026.8.1 contains an access-control bypass in the Microsoft Teams integration. When groupPolicy is set to allowlist, a missing or unsupported configured access group produces a denied group-resolution result that is not rejected by the final message-admissio...

CVE-2026-69559

Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

CVE-2026-65812

Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

CVE-2026-65812

Microsoft Teams for Android is affected by an information disclosure vulnerability caused by the insertion of sensitive information into sent data, allowing an authorized attacker to disclose information over a network. The CVSS 3.1 score is 6.8 (Medium) , with a network attack vector, low comple...

EUVD-2026-73739

Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

CVE-2026-69559

CVE-2026-69559 is an origin validation error in Microsoft Teams for Android that allows an authorized attacker to disclose information over a network. The vulnerability carries a CVSS 3.1 base score of 5.8 (Medium) with a network vector, high attack complexity, low privileges required, and user i...

EUVD-2026-73702

Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

Microsoft Teams for Android Information Disclosure Vulnerability

Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

Microsoft Teams for Android Information Disclosure Vulnerability

Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

PT-2026-87565

Name of the Vulnerable Software and Affected Versions Microsoft Teams for Android affected versions not specified Description An origin validation error allows an authorized attacker to disclose information over a network. Origin validation is a security mechanism used to verify that a request...