Sunday, 13 September 2026
8 agent hacks today 7 vs yesterday (1)

CVE-2026-50517: Unsafe deserialization in M365 Copilot

Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.

Disclosed 24 July 2026 · Record updated 13 September 2026

Impact

Authorized attacker can execute code over a network through unsafe deserialization

Our coverage

No articles linked to this incident yet.

Sources

  1. nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2026-50517