CVE-2026-21520

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

April 15, 2026

Last Seen

June 23, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

OrcaRouter AI Threat Report 2026 Highlights Rising Prompt Injection Risks72.5

OrcaRouter Security Research released its AI Threat Report 2026, identifying prompt injection as the leading risk to large language model (LLM) applications, with a 340% increase in such attacks year-over-year. The report reveals that 13% of organizations have been breached through AI models, primar...

Microsoft and Salesforce Address AI Agent Data Exfiltration Vulnerabilities70.5

Microsoft and Salesforce have patched serious prompt injection vulnerabilities in their AI platforms, Copilot Studio and Agentforce, respectively. Capsule Security identified these flaws, allowing attackers to exfiltrate sensitive data via crafted inputs in SharePoint and CRM forms. The Microsoft vu...