All news & advisories

Actively exploited October 14, 2026

CVE-2026-96951: Actively Exploited Vulnerability

CVE-2026-96951 CVSS 8.8 CISA KEV · actively exploited

Who it affects: See the summary below.
What to do: Patch immediately — prioritise internet-facing systems.

CVE-2026-96951 Advisory

Severity: HIGH (CVSS 8.8)

Status: Actively Exploited (KEV Catalog)

Vulnerability: Command injection in Windows Shell allowing attackers to bypass security features via network access.

Type: Improper neutralization of special elements in command input (CWE-78)

Action Required:

Prioritize patching Windows systems immediately
Monitor for exploitation attempts targeting shell command interfaces
Apply Microsoft security updates from MSRC guidance

References:

Data as of October 14, 2026. Sources: nvd.nist.gov, msrc.microsoft.com, cisa.gov. Figures are pulled from public vendor and security data and refreshed automatically.

Back to all news & advisories