Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-20 | 1 | General1 |
| 2026-03-22 | 1 | Disclosure1 |
| 2026-03-24 | 2 | Disclosure2 |
#securityupdate #microsoft #定例外 2026. 3.19 Copilot の情報漏えいの脆弱性 CVE-2026-26136 Security Vulnerability リリース日: - マイクロソフト https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26136
Post summary
Microsoft disclosed CVE-2026-26136 as a Copilot information‑leak vulnerability, but no PoC, exploit, or patch details are included.
#securityupdate #microsoft #定例外 CVE-2026-26136 Security Vulnerability 影響: 情報漏えい 最大深刻度: 緊急 CVSS:3.1 6.5 / 5.7 悪用可能性 ・一般に公開: No ・悪用: No ・Exploitability assessment: https://x.com/kawn2020/status/2036265161636585587
Post summary
The tweet announces Microsoft CVE-2026-26136 as an information‑leak vulnerability with urgent severity and CVSS scores of 6.5/5.7, but provides no evidence of exploits, patches, or active attacks.
CVE-2026-26136 Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over … https://www.cve.org/CVERecord?id=CVE-2026-26136
Post summary
The post announces CVE‑2026‑26136 as a command injection issue in Microsoft Copilot that could allow unauthorized information disclosure, but provides no evidence of exploitation, PoC, or patch.
CVE-2026-26136 Command Injection Vulnerability in Microsoft Copilot Enables Info... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-26136 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
The post identifies CVE-2026-26136 as a command injection vulnerability in Microsoft Copilot but provides no additional details such as exploit code, active usage, or patches.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | copilot | - | - | - |