CVE-2026-96251
HighCVSS 8.8Summary
Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.
Risk Assessment
An unauthorized attacker could remotely execute code, potentially leading to full system compromise.
Recommendation
Restrict access to PowerShell and apply vendor security updates.
Other vulnerabilities in Microsoft PowerShell
See all- CVE-2026-50523High
Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.
- CVE-2026-70338High
Improper control of generation of code (code injection) in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
- CVE-2026-59119High
A vulnerability in Microsoft PowerShell is due to incorrect default permissions, allowing an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS