CVE-2026-42824: Missing authentication for critical function in M365
Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network.
- EPSS 7.6% (94.0% percentile)
- CVSS 6.5 medium
Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network.