CVE Details

CVE-2026-96951 Microsoft Windows Command Injection Vulnerability
Published: 2026-10-13 CVSS: 8.8 HIGH Product: Microsoft Windows Due Date: 2026-10-16

Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network.

GitHub PoC

Warning: GitHub PoC repositories are unverified. Some may be fake or contain malware. Use caution and review code before running anything.

No GitHub PoC data.

FIRST EPSS

EPSS estimates the probability of exploitation in the next 30 days. Higher values indicate higher likelihood of real-world exploitation.

No EPSS data.

Timeline

CVE Stalker KEV MITRE GitHub FIRST (EPSS)

MITRE

CVSS

  • Score: 8.8
  • Severity: HIGH
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C

SSVC

  • Exploitation: active
  • Automatable: no
  • Technical Impact: total

References

Show Raw Data
Key Remaining Key Value
dataType CVE_RECORD
dataVersion 5.2
cveMetadata > cveId CVE-2026-96951
cveMetadata > assignerOrgId f38d906d-7342-40ea-92c1-6c4a2c6478c8
cveMetadata > state PUBLISHED
cveMetadata > assignerShortName microsoft
cveMetadata > dateReserved 2026-09-23T20:35:19.928Z
cveMetadata > datePublished 2026-10-13T19:01:26.801Z
cveMetadata > dateUpdated 2026-10-13T20:37:34.237Z
containers > cna > title Windows Shell Security Feature Bypass Vulnerability
containers > cna > datePublic 2026-10-13T14:00:00.000Z
containers > cna > cpeApplicability > 0 > nodes > 0 > operator OR
containers > cna > cpeApplicability > 0 > nodes > 0 > negate False
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 0 > vulnerable True
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 0 > criteria cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 0 > versionStartIncluding 6.3.9600.0
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 0 > versionEndExcluding 6.3.9600.23470
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 1 > vulnerable True
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 1 > criteria cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 1 > versionStartIncluding 6.3.9600.0
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 1 > versionEndExcluding 6.3.9600.23470
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 2 > vulnerable True
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 2 > criteria cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 2 > versionStartIncluding 10.0.14393.0
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 2 > versionEndExcluding 10.0.14393.9612
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 3 > vulnerable True
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 3 > criteria cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 3 > versionStartIncluding 10.0.14393.0
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 3 > versionEndExcluding 10.0.14393.9612
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 4 > vulnerable True
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 4 > criteria cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 4 > versionStartIncluding 10.0.14393.0
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 4 > versionEndExcluding 10.0.14393.9612
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 5 > vulnerable True
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 5 > criteria cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 5 > versionStartIncluding 10.0.17763.0
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 5 > versionEndExcluding 10.0.17763.9376
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 6 > vulnerable True
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 6 > criteria cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 6 > versionStartIncluding 10.0.17763.0
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 6 > versionEndExcluding 10.0.17763.9376
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 7 > vulnerable True
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 7 > criteria cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 7 > versionStartIncluding 10.0.17763.0
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 7 > versionEndExcluding 10.0.17763.9376
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 8 > vulnerable True
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 8 > criteria cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 8 > versionStartIncluding 10.0.19044.0
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 8 > versionEndExcluding 10.0.19044.7807
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 9 > vulnerable True
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 9 > criteria cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 9 > versionStartIncluding 10.0.19045.0
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 9 > versionEndExcluding 10.0.19044.7807
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 10 > vulnerable True
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 10 > criteria cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 10 > versionStartIncluding 10.0.20348.0
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 10 > versionEndExcluding 10.0.20348.5761
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 11 > vulnerable True
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 11 > criteria cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 11 > versionStartIncluding 10.0.22631.0
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 11 > versionEndExcluding 10.0.22631.7652
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 12 > vulnerable True
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 12 > criteria cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 12 > versionStartIncluding 10.0.22631.0
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 12 > versionEndExcluding 10.0.22631.7652
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 13 > vulnerable True
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 13 > criteria cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 13 > versionStartIncluding 10.0.26100.0
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 13 > versionEndExcluding 10.0.26100.9711
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 14 > vulnerable True
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 14 > criteria cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 14 > versionStartIncluding 10.0.26200.0
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 14 > versionEndExcluding 10.0.26200.9711
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 15 > vulnerable True
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 15 > criteria cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 15 > versionStartIncluding 10.0.26300.0
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 15 > versionEndExcluding 10.0.26300.9711
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 16 > vulnerable True
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 16 > criteria cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 16 > versionStartIncluding 10.0.26100.0
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 16 > versionEndExcluding 10.0.26100.33650
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 17 > vulnerable True
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 17 > criteria cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 17 > versionStartIncluding 10.0.26100.0
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 17 > versionEndExcluding 10.0.26100.33650
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 18 > vulnerable True
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 18 > criteria cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 18 > versionStartIncluding 10.0.28000.0
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 18 > versionEndExcluding 10.0.28000.3231
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 19 > vulnerable True
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 19 > criteria cpe:2.3:a:microsoft:outlook.com:*:*:*:*:*:*:*:*
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 19 > versionStartIncluding 1.0.0
containers > cna > cpeApplicability > 0 > nodes > 0 > cpeMatch > 19 > versionEndExcluding 20260925.100
containers > cna > affected > 0 > vendor Microsoft
containers > cna > affected > 0 > product Outlook.com
containers > cna > affected > 0 > versions > 0 > version 1.0.0
containers > cna > affected > 0 > versions > 0 > lessThan 20260925.100
containers > cna > affected > 0 > versions > 0 > versionType custom
containers > cna > affected > 0 > versions > 0 > status affected
containers > cna > affected > 1 > vendor Microsoft
containers > cna > affected > 1 > product Windows 10 Version 1607
containers > cna > affected > 1 > platforms > 0 32-bit Systems
containers > cna > affected > 1 > platforms > 1 x64-based Systems
containers > cna > affected > 1 > versions > 0 > version 10.0.14393.0
containers > cna > affected > 1 > versions > 0 > lessThan 10.0.14393.9612
containers > cna > affected > 1 > versions > 0 > versionType custom
containers > cna > affected > 1 > versions > 0 > status affected
containers > cna > affected > 2 > vendor Microsoft
containers > cna > affected > 2 > product Windows 10 Version 1809
containers > cna > affected > 2 > platforms > 0 32-bit Systems
containers > cna > affected > 2 > platforms > 1 x64-based Systems
containers > cna > affected > 2 > versions > 0 > version 10.0.17763.0
containers > cna > affected > 2 > versions > 0 > lessThan 10.0.17763.9376
containers > cna > affected > 2 > versions > 0 > versionType custom
containers > cna > affected > 2 > versions > 0 > status affected
containers > cna > affected > 3 > vendor Microsoft
containers > cna > affected > 3 > product Windows 10 Version 21H2
containers > cna > affected > 3 > platforms > 0 32-bit Systems
containers > cna > affected > 3 > platforms > 1 ARM64-based Systems
containers > cna > affected > 3 > platforms > 2 x64-based Systems
containers > cna > affected > 3 > versions > 0 > version 10.0.19044.0
containers > cna > affected > 3 > versions > 0 > lessThan 10.0.19044.7807
containers > cna > affected > 3 > versions > 0 > versionType custom
containers > cna > affected > 3 > versions > 0 > status affected
containers > cna > affected > 4 > vendor Microsoft
containers > cna > affected > 4 > product Windows 10 Version 22H2
containers > cna > affected > 4 > platforms > 0 32-bit Systems
containers > cna > affected > 4 > platforms > 1 ARM64-based Systems
containers > cna > affected > 4 > platforms > 2 x64-based Systems
containers > cna > affected > 4 > versions > 0 > version 10.0.19045.0
containers > cna > affected > 4 > versions > 0 > lessThan 10.0.19044.7807
containers > cna > affected > 4 > versions > 0 > versionType custom
containers > cna > affected > 4 > versions > 0 > status affected
containers > cna > affected > 5 > vendor Microsoft
containers > cna > affected > 5 > product Windows 11 version 23H2
containers > cna > affected > 5 > platforms > 0 ARM64-based Systems
containers > cna > affected > 5 > versions > 0 > version 10.0.22631.0
containers > cna > affected > 5 > versions > 0 > lessThan 10.0.22631.7652
containers > cna > affected > 5 > versions > 0 > versionType custom
containers > cna > affected > 5 > versions > 0 > status affected
containers > cna > affected > 6 > vendor Microsoft
containers > cna > affected > 6 > product Windows 11 Version 23H2
containers > cna > affected > 6 > platforms > 0 x64-based Systems
containers > cna > affected > 6 > versions > 0 > version 10.0.22631.0
containers > cna > affected > 6 > versions > 0 > lessThan 10.0.22631.7652
containers > cna > affected > 6 > versions > 0 > versionType custom
containers > cna > affected > 6 > versions > 0 > status affected
containers > cna > affected > 7 > vendor Microsoft
containers > cna > affected > 7 > product Windows 11 Version 24H2
containers > cna > affected > 7 > platforms > 0 ARM64-based Systems
containers > cna > affected > 7 > platforms > 1 x64-based Systems
containers > cna > affected > 7 > versions > 0 > version 10.0.26100.0
containers > cna > affected > 7 > versions > 0 > lessThan 10.0.26100.9711
containers > cna > affected > 7 > versions > 0 > versionType custom
containers > cna > affected > 7 > versions > 0 > status affected
containers > cna > affected > 8 > vendor Microsoft
containers > cna > affected > 8 > product Windows 11 Version 25H2
containers > cna > affected > 8 > platforms > 0 ARM64-based Systems
containers > cna > affected > 8 > platforms > 1 x64-based Systems
containers > cna > affected > 8 > versions > 0 > version 10.0.26200.0
containers > cna > affected > 8 > versions > 0 > lessThan 10.0.26200.9711
containers > cna > affected > 8 > versions > 0 > versionType custom
containers > cna > affected > 8 > versions > 0 > status affected
containers > cna > affected > 9 > vendor Microsoft
containers > cna > affected > 9 > product Windows 11 version 26H1
containers > cna > affected > 9 > platforms > 0 ARM64-based Systems
containers > cna > affected > 9 > platforms > 1 x64-based Systems
containers > cna > affected > 9 > versions > 0 > version 10.0.28000.0
containers > cna > affected > 9 > versions > 0 > lessThan 10.0.28000.3231
containers > cna > affected > 9 > versions > 0 > versionType custom
containers > cna > affected > 9 > versions > 0 > status affected
containers > cna > affected > 10 > vendor Microsoft
containers > cna > affected > 10 > product Windows 11 Version 26H2
containers > cna > affected > 10 > platforms > 0 ARM64-based Systems
containers > cna > affected > 10 > platforms > 1 x64-based Systems
containers > cna > affected > 10 > versions > 0 > version 10.0.26300.0
containers > cna > affected > 10 > versions > 0 > lessThan 10.0.26300.9711
containers > cna > affected > 10 > versions > 0 > versionType custom
containers > cna > affected > 10 > versions > 0 > status affected
containers > cna > affected > 11 > vendor Microsoft
containers > cna > affected > 11 > product Windows Server 2012 R2
containers > cna > affected > 11 > platforms > 0 x64-based Systems
containers > cna > affected > 11 > versions > 0 > version 6.3.9600.0
containers > cna > affected > 11 > versions > 0 > lessThan 6.3.9600.23470
containers > cna > affected > 11 > versions > 0 > versionType custom
containers > cna > affected > 11 > versions > 0 > status affected
containers > cna > affected > 12 > vendor Microsoft
containers > cna > affected > 12 > product Windows Server 2012 R2 (Server Core installation)
containers > cna > affected > 12 > platforms > 0 x64-based Systems
containers > cna > affected > 12 > versions > 0 > version 6.3.9600.0
containers > cna > affected > 12 > versions > 0 > lessThan 6.3.9600.23470
containers > cna > affected > 12 > versions > 0 > versionType custom
containers > cna > affected > 12 > versions > 0 > status affected
containers > cna > affected > 13 > vendor Microsoft
containers > cna > affected > 13 > product Windows Server 2016
containers > cna > affected > 13 > platforms > 0 x64-based Systems
containers > cna > affected > 13 > versions > 0 > version 10.0.14393.0
containers > cna > affected > 13 > versions > 0 > lessThan 10.0.14393.9612
containers > cna > affected > 13 > versions > 0 > versionType custom
containers > cna > affected > 13 > versions > 0 > status affected
containers > cna > affected > 14 > vendor Microsoft
containers > cna > affected > 14 > product Windows Server 2016 (Server Core installation)
containers > cna > affected > 14 > platforms > 0 x64-based Systems
containers > cna > affected > 14 > versions > 0 > version 10.0.14393.0
containers > cna > affected > 14 > versions > 0 > lessThan 10.0.14393.9612
containers > cna > affected > 14 > versions > 0 > versionType custom
containers > cna > affected > 14 > versions > 0 > status affected
containers > cna > affected > 15 > vendor Microsoft
containers > cna > affected > 15 > product Windows Server 2019
containers > cna > affected > 15 > platforms > 0 x64-based Systems
containers > cna > affected > 15 > versions > 0 > version 10.0.17763.0
containers > cna > affected > 15 > versions > 0 > lessThan 10.0.17763.9376
containers > cna > affected > 15 > versions > 0 > versionType custom
containers > cna > affected > 15 > versions > 0 > status affected
containers > cna > affected > 16 > vendor Microsoft
containers > cna > affected > 16 > product Windows Server 2019 (Server Core installation)
containers > cna > affected > 16 > platforms > 0 x64-based Systems
containers > cna > affected > 16 > versions > 0 > version 10.0.17763.0
containers > cna > affected > 16 > versions > 0 > lessThan 10.0.17763.9376
containers > cna > affected > 16 > versions > 0 > versionType custom
containers > cna > affected > 16 > versions > 0 > status affected
containers > cna > affected > 17 > vendor Microsoft
containers > cna > affected > 17 > product Windows Server 2022
containers > cna > affected > 17 > platforms > 0 x64-based Systems
containers > cna > affected > 17 > versions > 0 > version 10.0.20348.0
containers > cna > affected > 17 > versions > 0 > lessThan 10.0.20348.5761
containers > cna > affected > 17 > versions > 0 > versionType custom
containers > cna > affected > 17 > versions > 0 > status affected
containers > cna > affected > 18 > vendor Microsoft
containers > cna > affected > 18 > product Windows Server 2025
containers > cna > affected > 18 > platforms > 0 x64-based Systems
containers > cna > affected > 18 > versions > 0 > version 10.0.26100.0
containers > cna > affected > 18 > versions > 0 > lessThan 10.0.26100.33650
containers > cna > affected > 18 > versions > 0 > versionType custom
containers > cna > affected > 18 > versions > 0 > status affected
containers > cna > affected > 19 > vendor Microsoft
containers > cna > affected > 19 > product Windows Server 2025 (Server Core installation)
containers > cna > affected > 19 > platforms > 0 x64-based Systems
containers > cna > affected > 19 > versions > 0 > version 10.0.26100.0
containers > cna > affected > 19 > versions > 0 > lessThan 10.0.26100.33650
containers > cna > affected > 19 > versions > 0 > versionType custom
containers > cna > affected > 19 > versions > 0 > status affected
containers > cna > descriptions > 0 > value Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
containers > cna > descriptions > 0 > lang en-US
containers > cna > problemTypes > 0 > descriptions > 0 > description CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
containers > cna > problemTypes > 0 > descriptions > 0 > lang en-US
containers > cna > problemTypes > 0 > descriptions > 0 > type CWE
containers > cna > problemTypes > 0 > descriptions > 0 > cweId CWE-77
containers > cna > providerMetadata > orgId f38d906d-7342-40ea-92c1-6c4a2c6478c8
containers > cna > providerMetadata > shortName microsoft
containers > cna > providerMetadata > dateUpdated 2026-10-13T20:37:34.237Z
containers > cna > references > 0 > name Windows Shell Security Feature Bypass Vulnerability
containers > cna > references > 0 > tags > 0 vendor-advisory
containers > cna > references > 0 > tags > 1 patch
containers > cna > references > 0 > url https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96951
containers > cna > metrics > 0 > format CVSS
containers > cna > metrics > 0 > scenarios > 0 > lang en-US
containers > cna > metrics > 0 > scenarios > 0 > value GENERAL
containers > cna > metrics > 0 > cvssV3_1 > version 3.1
containers > cna > metrics > 0 > cvssV3_1 > baseSeverity HIGH
containers > cna > metrics > 0 > cvssV3_1 > baseScore 8.8
containers > cna > metrics > 0 > cvssV3_1 > vectorString CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
containers > adp > 0 > metrics > 0 > other > type ssvc
containers > adp > 0 > metrics > 0 > other > content > id CVE-2026-96951
containers > adp > 0 > metrics > 0 > other > content > role CISA Coordinator
containers > adp > 0 > metrics > 0 > other > content > options > 0 > Exploitation active
containers > adp > 0 > metrics > 0 > other > content > options > 1 > Automatable no
containers > adp > 0 > metrics > 0 > other > content > options > 2 > Technical Impact total
containers > adp > 0 > metrics > 0 > other > content > version 2.0.3
containers > adp > 0 > metrics > 0 > other > content > timestamp 2026-10-13T19:40:04.830018Z
containers > adp > 0 > metrics > 1 > other > type kev
containers > adp > 0 > metrics > 1 > other > content > dateAdded 2026-10-13
containers > adp > 0 > metrics > 1 > other > content > reference https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-96951
containers > adp > 0 > references > 0 > url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-96951
containers > adp > 0 > references > 0 > tags > 0 government-resource
containers > adp > 0 > title CISA ADP Vulnrichment
containers > adp > 0 > providerMetadata > orgId 134c704f-9b21-4f2e-91b3-4a467353bcc0
containers > adp > 0 > providerMetadata > shortName CISA-ADP
containers > adp > 0 > providerMetadata > dateUpdated 2026-10-13T19:58:24.285Z
containers > adp > 0 > timeline > 0 > time 2026-10-13T00:00:00.000Z
containers > adp > 0 > timeline > 0 > lang en
containers > adp > 0 > timeline > 0 > value CVE-2026-96951 added to CISA KEV