CVE-2026-21520 - Vulnerability Details

Related Threat Clusters

• OrcaRouter AI Threat Report 2026 Highlights Rising Prompt Injection Risks

  OrcaRouter Security Research released its AI Threat Report 2026, identifying prompt injection as the leading risk to large language model (LLM) applications, with a 340% increase in such attacks year-over-year. The…

  3 articles · Updated June 22, 2026
• Microsoft and Salesforce Address AI Agent Data Exfiltration Vulnerabilities

  Microsoft and Salesforce have patched serious prompt injection vulnerabilities in their AI platforms, Copilot Studio and Agentforce, respectively. Capsule Security identified these flaws, allowing attackers to…

  6 articles · Updated April 15, 2026

Recent Intelligence Reports

• OrcaRouter Releases AI Threat Report 2026 and Makes Its Security Controls Free Amid ... — Bignewsnetwork · June 23, 2026
• OrcaRouter Releases AI Threat Report 2026 and Makes Its Security Controls Free Amid ... — Irishsun · June 22, 2026
• OrcaRouter Releases AI Threat Report 2026 and Makes Its Security Controls Free Amid Rise in Prompt-Injection Attacks — Aninews.In · June 22, 2026
• Copilot flaw — www.capsulesecurity.io · April 15, 2026
• Microsoft patched a Copilot Studio prompt injection. The data exfiltrated anyway. — Venturebeat · April 15, 2026
• Copilot and Agentforce fall to form — Csoonline · April 15, 2026
• Microsoft, Salesforce Patch AI Agent Data Leak Flaws — Darkreading · April 15, 2026

Related Entities