Cases · Who discovered it: an independent researcher or journalist · Added to the register (date we first published it): last 30 days · Root cause: a safeguard that was in place did not hold
| What happened | What went wrong | Severity | Earliest source |
|---|---|---|---|
| SalesBleed: 0-click data exfiltration from Salesforce Agentforce via indirect prompt injection in Web-to-Lead form Salesforceminor · earliest source 2026-09-24 | security breach | minor | 2026-09-24 |
Showing 1–1 of 1. Or take the JSON.