HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-81381 — Insufficiently protected credentials in GitHub Copilot and Visual Studio Code al...

·Source: NIST NVD

Updated:

Executive Summary

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

Analysis

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. CVSS Score: 6.5. Published: 2026-09-08T18:20:54.470.

Indicators of Compromise (1)

CVE (1)
CVE-2026-81381
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Sep 8, 2026. Verified by: NIST.

Related Threats

CRITICALRansomware

Patch Tuesday - September 2026

Microsoft is publishing 974 own-product vulnerabilities on September 2026 Patch Tuesday , including 723 vulnerabilities in Windows. Along with Microsoft fixes for 25 non-Microsoft CVEs, that brings the total number of vulnerabilities on the table today to 999. Whether this is the biggest Patch Tuesday ever depends on how we count, but this is by far the most CVEs that Microsoft has ever published

CVE-2026-85880CVE-2026-81963
Rapid7
CRITICALVulnerabilityNEW

Critical UEFI Flaw Exposes Systems to Pre-Boot Attacks

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/critical-uefi-flaw-exposes-systems-to-pre-boot-attacks-image_small-3-a-33252.jpg" align=right hspace=4><b>Attackers Can Exploit ICMP Error Handling Before Operating System Protections Load</b><br>A critical buffer overflow in TianoCore's EDK II UEFI firmware, tracked as CVE-2026-97631, could let unauthenticated attackers execute c

CVE-2026-97631
Bank Info Security
MEDIUMVulnerability

Binance probes potential $5.8 billion crypto-theft hack

Cryptocurrency exchange Binance is investigating a potential security breach involving up to $5.8 billion in digital assets, in what could become the largest cryptocurrency hack in history. [...]

BleepingComputer