CVE-2026-96951
HIGH
Actively Exploited
NVDCISA KEV
CVSS Score
8.8
Severity
HIGH
Published
Oct 13, 2026
Vendor
unknown
This vulnerability is in the CISA Known Exploited Vulnerabilities Catalog. Active exploitation has been observed. Immediate patching is recommended.
Description
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.