CVE-2026-42824: Missing authentication for critical function in M365
Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network.
- EPSS 0.9% (58.8% percentile)
- CVSS 6.5 medium
Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network.