Oct 2026: Microsoft PowerShell Remote Code Execution Vulnerability
CVE-2026-96251 Published on October 13, 2026

Microsoft PowerShell Remote Code Execution Vulnerability
Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.

Vendor Advisory NVD

Weakness Type

Reliance on Untrusted Inputs in a Security Decision

The application uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism.


Products Associated with CVE-2026-96251

Want to know whenever a new CVE is published for Microsoft Powershell? stack.watch will email you.

 

Affected Versions

Microsoft PowerShell 7.4: Microsoft PowerShell 7.5: Microsoft PowerShell 7.6: