
CVE@CVEnew
CVE-2026-85887 Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network. https://www.cve.org/CVERecord?id=CVE-2026-85887
000001.2K
58.1K followersView on X
Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE

CVE-2026-85887 Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network. https://www.cve.org/CVERecord?id=CVE-2026-85887