Articles Writeups CVE Programs

Sign in Start free

BUGFLARE

Threat intelligence and bug bounty research platform. Live vulnerability data, in-app writeup reading, and program tracking — aggregated from trusted public sources.

Explore

Articles Writeups CVE Programs Create account

Legal

© 2026 Bugflare. Publishers retain authorship; always verify on the source.

bugflare.site

CVE-2026-59118 · CRITICAL · Bugflare

CVE-2026-59118

CRITICAL

CVE: CVE-2026-59118 - Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a networkSign in to save

Sign in to like · 0

CVSS

9.3

CVSS v3.1

EPSS

0.4%

Exploit Prediction Score

Published

August 7, 2026

Exploitability

EPSS probability 0.4%

Description

Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network.

Weaknesses

CWE-285

Affected Packages

No package data available.

Aliases

Related references

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59118

Source

Originally published by NVD (nvd.nist.gov).

CVE metadata is aggregated from public vulnerability databases. Scores and descriptions remain attributed to their origin feeds.

Open original on nvd.nist.gov →https://nvd.nist.gov/vuln/detail/CVE-2026-59118