p PatchFirst

CVE-2026-96251

CVE-2026-96251 · Microsoft PowerShell Remote Code Execution Vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.

CVSS 8.8 · High · EPSS 0.5% · Fix available

Published
Updated

Affected products and versions

  • powershell 7.4

    Versions
    • ≥ 7.4.0, < 7.4.21: Affected (custom)

    Update to 7.4.21

  • powershell 7.5

    Versions
    • ≥ 7.5.0, < 7.5.12: Affected (custom)

    Update to 7.5.12

  • powershell 7.6

    Versions
    • ≥ 7.6.0, < 7.6.8: Affected (custom)

    Update to 7.6.8

Original sources

Check your server →