← Back to search

CVE-2026-96251

8.8 HIGH

Published 2026-10-13 · Updated 2026-10-13

AI risk analysis

Summary
PowerShell allows unauthorized attackers to execute code remotely by relying on untrusted inputs in security decisions, creating a high-severity vulnerability that can lead to full system compromise.
Exploitability
Exploitation requires a network-based attack with user interaction, making it moderately difficult but achievable when users open malicious PowerShell content or interact with compromised systems.
Blast radius
If exploited, this vulnerability could allow attackers to execute arbitrary code on target systems, potentially leading to complete system compromise and lateral movement across networks.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
No fixed version is published. Disable the affected PowerShell features or restrict access to PowerShell execution environments until a patch is available.
rcepowershellnetwork

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-807

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.