CVE-2026-96951CISA KEV
Microsoft Windows Command Injection Vulnerability
CISA lists this Microsoft vulnerability as known exploited. Its MSRC release detail is outside this installation's collected history.
CISA catalog record
Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network.
- Product
- Windows
- Added to KEV
- 13 Oct 2026
- Federal remediation due
- 16 Oct 2026
- Known ransomware use
- Not reported