CVE-2026-96303
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk48th percentile - higher than 48% of all known CVEs
Summary
Improperly implemented security check in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.
Risk Assessment
Risk of bypassing security and potential unauthorized actions in the system.
Recommendation
Update PowerShell and apply recommended security configurations.
Other vulnerabilities in Microsoft PowerShell
See all- CVE-2026-96251High
Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.
- CVE-2026-50523High
Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.
- CVE-2026-70338High
Improper control of generation of code (code injection) in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
- CVE-2026-59119High
A vulnerability in Microsoft PowerShell is due to incorrect default permissions, allowing an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS