CVE-2026-80098
Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.3
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N/E:U/RL:O/RC:C
- EPSS probability
- 0.33%
- CWE
- CWE-347
- Published
- 2026-09-03
- Last modified
- 2026-09-10
Affected products
- Microsoft Microsoft Copilot Studio
Weakness type
Related vulnerabilities
- CVE-2023-54355 — PocketMine-MP 5.2.0 Server Crash via Incorrect EC Curve
- CVE-2026-79970 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to...
- CVE-2026-56207 — Apache Impala: SAML authentication bypass via forged bearer token
- CVE-2026-87732 — An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml. The...
- CVE-2026-86080 — n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open
- CVE-2026-69646 — Skype for Business Spoofing Vulnerability
- CVE-2026-57098 — Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability
- CVE-2026-14296 — nRF54H20: MCUBoot can be tricked to executing unauthenticated code