{"id":"CVE-2026-96251","published":"2026-10-13T19:21:51.193","lastModified":"2026-10-13T20:19:16.460","description":"Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-807"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96251","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"PowerShell allows unauthorized attackers to execute code remotely by relying on untrusted inputs in security decisions, creating a high-severity vulnerability that can lead to full system compromise.","exploitability":"Exploitation requires a network-based attack with user interaction, making it moderately difficult but achievable when users open malicious PowerShell content or interact with compromised systems.","blast_radius":"If exploited, this vulnerability could allow attackers to execute arbitrary code on target systems, potentially leading to complete system compromise and lateral movement across networks.","remediation":"No fixed version is published. Disable the affected PowerShell features or restrict access to PowerShell execution environments until a patch is available.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","powershell","network"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:18:21.308Z"}}