CVE-2026-85885Disclosure(microsoft / 365_copilot)

HIGHCVSS 8.8 · HIGH

Exploitation observed; activity peaked at 3 mentions and remains active

Immediate actions

Patch microsoft 365_copilot systems immediately
Assume compromise if assets are exposed
Hunt for exploitation attempts and persistence artifacts

Recommended action window: Immediate (within 24h)

NVD description

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network.

microsoft CVEs Back to dashboard

6.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85885

Weakness type (CWE)

CWE-77

Priority

HIGH

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

365_copilot

Threat summary

Active exploitation appears in 1 classified signals
Exploit tooling references are present in monitored signal
Patch or workaround signal is available
4 mentions across 2 observed days

What's happening

Active exploitation reported across 1 signal
Exploit tool or code specified in 1 signal
Patch or workaround mentioned in 2 signals
Technical details provided in 4 signals
Disclosure: 2 classified signals
Peaked 1d ago at 3 mentions (2026-09-18); latest day: 1
4 total mentions across 2 days

Affected systems

Vendors

microsoft

Products

365_copilot

1 version affected across 1 product

Deep dive

Activity timeline4 mentions / 2d

Signal classification3 categories

Disclosure

250.0%

Active Exploitation

125.0%

Patch

125.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2026-85885

Classification over time

Date	Total	Labels

2026-09-18	3	Active Exploitation1Disclosure2
2026-09-22	1	Patch1

Full discourse4 posts

Rıdvan Yağlı@ridvanyagli45d
Disclosure
Microsoft / Azure tarafında bugün yayınlanan kritik güvenlik açıkları: — CVE-2026-69843: Microsoft Fabric CVSS: 10.0 Etkisi: Kimlik doğrulama atlatma (spoofing). Yetkisiz bir saldırganın ağ üzerinden kimlik doğrulamayı aşarak yetki yükseltmesine izin veriyor. — CVE-2026-62874: Azure Billing CVSS: 10.0 Etkisi: Veri doğrulama yetersizliği. Saldırgan tarafından sağlanan verinin yeterince doğrulanmaması, ağ üzerinden yetki yükseltmeye yol açabiliyor. — CVE-2026-85889: Azure AI Foundry CVSS: 10.0 Etkisi: Kritik bir fonksiyonda kimlik doğrulama eksikliği. Yetkisiz saldırgan ağ üzerinden kritik işlevi çağırarak yetki yükseltebiliyor. — CVE-2026-69865: Microsoft/Azure Container Registry CVSS: 10.0 Etkisi: Kullanıcı kontrollü anahtar üzerinden yetkilendirme atlatma. Yetkisiz saldırganın ağ üzerinden yetki yükseltmesine izin veriyor. — CVE-2026-69399: Azure Arc CVSS CVSS: 10.0 Etkisi: Confused Deputy / istem dışı proxy problemi. Azure Arc'ın başka bir güvenlik bağlamında gerçekleştirdiği işlemler kötüye kullanılarak yetki yükseltme mümkün. — CVE-2026-85878: Azure Database for PostgreSQL CVSS: 9.9 Etkisi: Hatalı yetkilendirme. Düşük seviyede yetkisi olan bir saldırgan ağ üzerinden daha yüksek yetkiler elde edebiliyor. — CVE-2026-87701: Azure Cosmos DB CVSS: 9.6 Etkisi: Injection açığı. Çıktıdaki özel karakterlerin yeterince filtrelenmemesi, yetkili bir saldırganın ağ üzerinden yetki yükseltmesine yol açabiliyor. — CVE-2026-85885: Microsoft 365 Copilot CVSS: 9.9 Etkisi: Command injection. Yetkili bir saldırganın özel hazırlanmış girdilerle komut enjeksiyonu gerçekleştirerek yetki yükseltmesine neden olabiliyor.
Post summary
The tweet discloses several newly reported Microsoft and Azure CVEs, detailing their CVSS scores, impact categories, and potential privilege‑escalation vectors across services such as Microsoft Fabric, Azure Billing, Azure AI Foundry, Container Registry, Azure Arc, PostgreSQL, Cosmos DB, and Microsoft 365 Copilot.
00030288
2.5K followersView on X
CVE@CVEnew46d
Disclosure
CVE-2026-85885 Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network. https://www.cve.org/CVERecord?id=CVE-2026-85885
Post summary
The text discloses a newly assigned command injection vulnerability (CVE‑2026‑85885) in Microsoft 365 Copilot that could enable privilege escalation for an authorized attacker, linking to the official CVE record.
000011.4K
58.1K followersView on X
BT Haberler@BTHaberler41d
Patch
Microsoft, Azure AI Foundry'de Maksimum Ciddiyette (CVSS 10.0) Bir Yetki Yükseltme Açığını Kapattı! Güvenlik araştırmacısı Rémy Marot'un keşfettiği CVE-2026-85889 (CVSS 10.0), Azure AI Foundry'de kritik bir işlevin kimlik doğrulamasını tamamen atlayarak, yetkisiz bir saldırganın ağ üzerinden yetki yükseltmesine izin veriyordu. • Microsoft, açığın vahşi doğada istismar edildiğine dair kanıt bulunmadığını belirtti; sorun bulut tarafında tamamen giderildiği için müşterilerin herhangi bir işlem yapmasına gerek kalmadı. • Aynı güncelleme paketinde CVE-2026-85885, CVE-2026-85878 ve CVE-2026-87701 dahil başka kritik açıklar da kapatıldı. Kurumların hızla benimsediği AI geliştirme platformlarında maksimum ciddiyette bir açığın ortaya çıkması, yapay zeka altyapısının da klasik bulut hizmetleri kadar titiz güvenlik denetimine tabi tutulması gerektiğini gösteriyor. #SiberGüvenlik #Azure #YapayZeka
Post summary
Microsoft has patched CVE-2026-85889 (CVSS 10.0) in Azure AI Foundry, an authentication bypass vulnerability that allowed privilege escalation, with no evidence of active exploitation. The fix was deployed in the cloud, and other critical CVEs were also addressed in the same update package.
0000032
44 followersView on X
SecureChap@SecureChap45d
Active Exploitation
An unauthenticated attacker could have seized control of Azure AI Foundry with a single CVSS 10 flaw that Microsoft fixed server-side with no customer steps required. CVE-2026-85889 stemmed from missing authentication on a critical function, letting any network caller escalate without credentials. The September 18 2026 advisory listed no observed exploitation. CVE-2026-85885 allowed command injection in Microsoft 365 Copilot via an authorized network path. CVE-2026-85878 bypassed authorization checks in Azure Database for PostgreSQL. CVE-2026-87701 failed to neutralize input in Azure Cosmos DB. All three carried CVSS 9.9 scores and were already mitigated server-side. CVE-2026-62721 gave SYSTEM to a local attacker in Windows User-Mode Power Service because access control checks lacked granularity. The September 2026 Cumulative Update KB5129194 shipped build 28000.2956 for Windows 11 26H1 on arm64 and x64. CVE-2026-85921 triggered a double free in Windows Secure Kernel Mode on the same out-of-band package, enabling elevation to VTL1. Microsoft addressed 974 vulnerabilities that week. An actively exploited ALPC flaw was chained with two Chrome bugs into the BlueMoon kit used by targeted actors. Defenders should verify the latest cumulative updates are applied across Windows and Azure workloads.
Post summary
The text reports several critical Microsoft vulnerabilities (including an actively exploited ALPC flaw in the BlueMoon kit) that were addressed by the September 2026 cumulative update, emphasizing the need for defenders to apply the latest patches across Windows and Azure services.
00000108
172 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	365_copilot	-	-	-

Explore more

Back to dashboard microsoft CVEs 365_copilot vulnerabilities

What researchers are saying

CVE-2026-85885

Rıdvan Yağlı[verified]@ridvanyagliDisclosure

The tweet discloses several newly reported Microsoft and Azure CVEs, detailing their CVSS scores, impact categories, and potential privilege‑escalation vectors across services such as Microsoft Fabric, Azure Billing, Azure AI Foundry, Container Registry, Azure Arc, PostgreSQL, Cosmos DB, and Microsoft 365 Copilot.

BT Haberler[verified]@BTHaberlerPatch

Microsoft has patched CVE-2026-85889 (CVSS 10.0) in Azure AI Foundry, an authentication bypass vulnerability that allowed privilege escalation, with no evidence of active exploitation. The fix was deployed in the cloud, and other critical CVEs were also addressed in the same update package.

SecureChap[verified]@SecureChapActive Exploitation

The text reports several critical Microsoft vulnerabilities (including an actively exploited ALPC flaw in the BlueMoon kit) that were addressed by the September 2026 cumulative update, emphasizing the need for defenders to apply the latest patches across Windows and Azure services.

CVE@CVEnewDisclosure

The text discloses a newly assigned command injection vulnerability (CVE‑2026‑85885) in Microsoft 365 Copilot that could enable privilege escalation for an authorized attacker, linking to the official CVE record.