SearchLeak CVE-2026-42824 M365 Copilot Prompt Injection Link Delivery

Ibrahim Saud@tektrix

•updated Jun 30, 2026•1•0•8

Detects the SearchLeak (CVE-2026-42824) delivery vector where a phishing link containing a long encoded 'q' parameter targeting Microsoft 365 Copilot Search is delivered via email to trigger prompt injection and subsequent data exfiltration of sensitive information.