CVE-2026-96251
8.8 HIGHPublished 2026-10-13 · Updated 2026-10-13
AI risk analysis
- Summary
- PowerShell allows unauthorized attackers to execute code remotely by relying on untrusted inputs in security decisions, creating a high-severity vulnerability that can lead to full system compromise.
- Exploitability
- Exploitation requires a network-based attack with user interaction, making it moderately difficult but achievable when users open malicious PowerShell content or interact with compromised systems.
- Blast radius
- If exploited, this vulnerability could allow attackers to execute arbitrary code on target systems, potentially leading to complete system compromise and lateral movement across networks.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- No fixed version is published. Disable the affected PowerShell features or restrict access to PowerShell execution environments until a patch is available.
rcepowershellnetwork
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-807
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-85817
- CRITICALCVE-2017-20242
- CRITICALCVE-2026-0163
- CRITICALCVE-2026-100202
- CRITICALCVE-2026-100219
- HIGHCVE-2026-100220
- CRITICALCVE-2026-100222
- HIGHCVE-2026-100908PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.