CVE-2026-103572

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 14, 2026

Last Seen

October 14, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

RCE Vulnerability in Visual Studio Copilot and SSMS Exploited via Trailing Dot57.8

A Remote Code Execution vulnerability (CVE-2026-103572, CVSS 8.8) was discovered in Microsoft Visual Studio Copilot and SQL Server Management Studio, allowing attackers to bypass security controls using a trailing dot in filenames. The flaw, reported in August 2026, arises from a path validation byp...