← Back

CVE-2026-96251

nvd nist
Published: Oct 13, 2026Modified: Oct 22, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: secure@microsoft.com (Secondary)

Description

Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.

Affected (3)

Microsoft
1 product
Powershell
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Powershell
7.4 ≤ version < 7.4.21
Powershell
7.5 ≤ version < 7.5.12
Powershell
7.6 ≤ version < 7.6.7

Related CWEs

CWE-807
Reliance on Untrusted Inputs in a Security Decision
The product uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism.

References (1)

Source: secure@microsoft.com
Vendor Advisory

Timeline

No history available yet.