CVE-2026-54130Disclosure(microsoft / 365_copilot)
MEDIUMCVSS 7.5 · HIGHExploitation observed; activity peaked at 5 mentions and remains active
Immediate actions
- Patch microsoft 365_copilot systems immediately
- Assume compromise if assets are exposed
Recommended action window: Immediate (within 24h)
NVD description
Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network.
4.0/ 10 priority
Sources & remediation
Vendor / third-party advisories
Weakness type (CWE)
CWE-306
Priority
MEDIUM
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- 365_copilot
Threat summary
- Active exploitation appears in 1 classified signals
- Patch or workaround signal is available
- 6 mentions across 2 observed days
- Momentum state: stable
What's happening
- Active exploitation reported across 1 signal
- Patch or workaround mentioned in 2 signals
- Technical details provided in 6 signals
- Disclosure: 4 classified signals
- Peaked 1d ago at 5 mentions (2026-06-19); latest day: 1
- 6 total mentions across 2 days
Affected systems
Vendors
Products
365_copilot
1 version affected across 1 product
Deep dive
Activity timeline6 mentions / 2d
Signal classification3 categories
Disclosure466.7%
Active Exploitation116.7%
Patch116.7%
Referenced assets5 URLs
By indicator
- https://www.cve.org/CVERecord?id=CVE-2026-54130
- http://infoflow.cloud
- https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
- https://github.com/alan-turing-institute/cyber-threat-observatory/blob/main/reports/2026-06-18/TIER_2_CVE-2026-54130.md
- https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-54130
Classification over time
| Date | Total | Labels |
|---|
| 2026-06-19 | 5 | Active Exploitation1Disclosure4 |
| 2026-06-25 | 1 | Patch1 |
CPE platform detail1 entries
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | 365_copilot | - | - | - |