CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-41090 — Improper neutralization of special elements used in a command ('command injectio...

·Source: NIST NVD

Updated:

Executive Summary

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform tampering over a network.

Analysis

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform tampering over a network. CVSS Score: 9.3. Published: 2026-05-22T23:16:52.500.

Indicators of Compromise (1)

CVE (1)
CVE-2026-41090
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on May 22, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

ThinkMarkets launches Ai assistant for CFD trading

ThinkMarkets (www.ThinkMarkets.com) today launches ChelseaAI, a product that connects a live ThinkTrader account directly to an AI assistant.

Finextra
MEDIUMVulnerabilityNEW

Beyond Assume-Breach: How AI-Native Security Will Reshape Enterprise Defense

Twenty years after Dark Reading launched, we're looking ahead at what's next for enterprise security. Spoiler: It's hyper-segmented, AI-orchestrated, and way more sophisticated than your dad's firewall.

Dark Reading
MEDIUMVulnerabilityNEW

Eventus names Eric Litz as CTo and Sarah-Jane McColl as chief customer officer

Eventus, a leading provider of comprehensive, at-scale trade surveillance and financial risk solutions, today announced the expansion of its leadership team with the appointment of Eric Litz as Chief Technology Officer (CTO) and Sarah-Jane McColl as Chief Customer Officer (CCO).

Finextra