{"vulnerability": "CVE-2026-103572", "sightings": [{"uuid": "8802630a-0400-48d9-88fe-abc08866d1b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103572", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mxx3y2wgoc22", "content": "Visual Studio\u3068SSMS\u306eCopilot\u306bRCE\u8106\u5f31\u6027\u300cCVE-2026-103572\u300d\u2015\u7814\u7a76\u8005\u304cPoC\u516c\u958b\u3001Microsoft\u304c\u4fee\u6b63 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9", "creation_timestamp": "2026-10-15T22:22:37.958975Z"}, {"uuid": "91362c94-44cc-413a-82a9-7ffe556d2201", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103572", "type": "seen", "source": "https://bsky.app/profile/yayafa.bsky.social/post/3mxx4xt5k3q2v", "content": "Visual Studio\u3068SSMS\u306eCopilot\u306bRCE\u8106\u5f31\u6027\u300cCVE-2026-103572\u300d\u2015\u7814\u7a76\u8005\u304cPoC\u516c\u958b\u3001Microsoft\u304c\u4fee\u6b63|\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab\n\nhttps://www.yayafa.com/2911692/\n\nMicrosoft\u306f2026\u5e7410\u6708\u2026", "creation_timestamp": "2026-10-15T22:40:22.861687Z"}, {"uuid": "f9a47b1a-810f-43c8-a435-7685e5243ff6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103572", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117435149213812212", "content": "CVE-2026-103572 Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.\nhttps://www.cve.org/CVERecord?id=CVE-2026-103572https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103572#Microsoft #MicrosoftVisualStudio2022version17.14 #MicrosoftVisualStudio2026version18.10#CVE_2026_103572#bot", "creation_timestamp": "2026-10-13T19:02:50.817917Z"}, {"uuid": "a7245dcf-e27c-4f54-9bd6-21f4fccd6641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-103572", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0426", "content": "", "creation_timestamp": "2026-10-13T11:56:15.000000Z"}, {"uuid": "7e293375-8681-4de1-9ff2-1c5a831021c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103572", "type": "seen", "source": "https://bsky.app/profile/hackplayers.bsky.social/post/3mxsaaau2m322", "content": "Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)  https://embracethered.com/blog/posts/2026/visual-studio-copilot-remote-code-execution/", "creation_timestamp": "2026-10-13T23:55:27.134940Z"}, {"uuid": "acbd0350-c195-4abc-8fa5-7865bfa1d8a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103572", "type": "seen", "source": "https://bsky.app/profile/glitterbean.wehavecookies.social.ap.brid.gy/post/3mxsdhu5am2h2", "content": "Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572) https://embracethered.com/blog/posts/2026/visual-studio-copilot-remote-code-execution/", "creation_timestamp": "2026-10-14T00:53:28.247492Z"}, {"uuid": "beebf140-6c30-411b-839c-120f12efdbf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103572", "type": "seen", "source": "https://bsky.app/profile/glitterbean.wehavecookies.social.ap.brid.gy/post/3mxsdqrkdll42", "content": "Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572) https://embracethered.com/blog/posts/2026/visual-studio-copilot-remote-code-execution/", "creation_timestamp": "2026-10-14T00:58:25.684545Z"}, {"uuid": "6ef63427-b3a4-40b0-a4b1-2e4e79d59bf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103572", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxsgeii6g32w", "content": "PoC and technical details for CVE-2026-103572, an 8.8-severity Visual Studio Copilot RCE and SSMS flaw, are now public. Patch your IDE immediately.\n\n#CVE2026103572 #VisualStudio #Copilot #RCE #MicrosoftSecurity #SSMS #Cybersecurity", "creation_timestamp": "2026-10-14T01:45:12.587375Z"}, {"uuid": "ffe54389-c542-4708-8b9c-434adb253a3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103572", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/117438464871282824", "content": "Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)\nMicrosoft has shipped a patch for a remote code execution vulnerability (CVE-2026-103572) in Visual Studio Copilot and SQL Server Management Studio. The flaw let Copilot bypass a path validation check, write to its own settings and configuration files, and achieve arbitrary command execution. https://embracethered.com/blog/posts/2026/visual-studio-copilot-remote-code-execution/", "creation_timestamp": "2026-10-14T09:06:03.666327Z"}, {"uuid": "702c647d-7d42-4810-8e0f-d805eb938a82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103572", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxt6ytoec42y", "content": "Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)\n\nMicrosoft has shipped a patch for a remote code execution vulnerability (CVE-2026-103572) in Visual Studio Copilot and SQL Server Management Studio. The fl... https://threatintel.cc/2026/10/14/visual-studio-copilot-and-ssms.html", "creation_timestamp": "2026-10-14T09:06:04.621299Z"}, {"uuid": "66c76775-03ad-4083-91ef-ae6ec73e0935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-103572", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-25", "content": "", "creation_timestamp": "2026-10-14T01:49:33.000000Z"}]}