Security Advisory

CVE-2026-41106

9.3
CRITICAL

Vulnerability Description

Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.
Published Date July 2, 2026
Official Source NIST NVD Advisory
Browse More Advisories