CVE-2026-96251: PowerShell 7.4 7.4.0 to before 7.4.21; +2 more affected products

Affected technology

PowerShell 7.4 · 7.4.0 to before 7.4.21
Microsoft

PowerShell 7.5 · 7.5.0 to before 7.5.12
Microsoft

PowerShell 7.6 · 7.6.0 to before 7.6.7
Microsoft

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · User interaction required

What an attacker can do

An unauthorized attacker can execute code over a network. Vendor/CNA’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high.