CVE-2026-96251

Analyzed Analyzed - Analysis Complete

PowerShell Security Decision Bypass Leads to Remote Code Execution

Publication date: 2026-10-13

Last updated on: 2026-10-22

Assigner: Microsoft Corporation

Description

Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-22

Generated

2026-11-08

AI Q&A

2026-10-14

EPSS Evaluated

2026-11-07

NVD

CVE-2026-96251

EUVD

EUVD-2026-100219

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	powershell	From 7.4 (inc) to 7.4.21 (exc)
microsoft	powershell	From 7.5 (inc) to 7.5.12 (exc)
microsoft	powershell	From 7.6 (inc) to 7.6.7 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-807	The product uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism.

Attack-Flow Graph

Executive Summary

This vulnerability in Microsoft PowerShell involves relying on untrusted inputs for security decisions. An unauthorized attacker can exploit this to execute code remotely over a network.

Impact Analysis

An attacker could gain control of affected systems, leading to unauthorized code execution, data theft, or further network compromise. Systems running vulnerable PowerShell versions are at risk.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating GDPR (data protection) and HIPAA (health data privacy) requirements. Organizations may face compliance penalties if exploited.

Mitigation Strategies

Update Microsoft PowerShell to the latest secure version immediately. Monitor network traffic for unusual PowerShell activity and restrict PowerShell execution policies to limit unauthorized code execution.

Hi! I’m here to help you understand CVE-2026-96251. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...