- Description
- Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
- Source
- secure@microsoft.com
- NVD status
- Undergoing Analysis
CVSS 3.1
- Type
- Secondary
- Base score
- 8.8
- Impact score
- 5.9
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Severity
- HIGH
- secure@microsoft.com
- CWE-77
- Hype score
- Not currently trending
#NØØT_Security_Alerts 🚨 #ALERT — MICROSOFT WINDOWS SHELL ZERO-DAY: ACTIVE EXPLOITATION CONFIRMED; CISA RECORDS KEV INCLUSION October 13, 2026 DISCLOSED BY: Microsoft Security Response Center / CISA PRODUCT: Microsoft Windows Shell CVE: CVE-2026-96951 SEVERITY: HIGH —
@Python_s_
13 Oct 2026
72 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🪟 KEV-listed & actively exploited: CVE-2026-96951 is a command injection flaw in Windows Shell bypassing security features over a network. Affects Win10, Win11 + Server 2012R2-2025. Patch now. #cybersecurity #ciso #cto #vulnerabilities #msp https://t.co/giojKCa8zu https:/
@SecAlertsCo
13 Oct 2026
55 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
ARETIQ Daily Vulnerability Bulletin — October 13, 2026 🔴 CRITICAL: CVE-2026-104935 (ivanti/connect_secure) AAS 14.0 — exploited ITW (CISA KEV) 🔴 CRITICAL: adobe/adobe_commerce (2 CVEs) AAS 13.9 🔴 CRITICAL: CVE-2026-96951 (microsoft/outlook.com) AAS 13.6 — exploite
@AretiqAI
13 Oct 2026
70 Impressions
0 Retweets
1 Like
1 Bookmark
0 Replies
0 Quotes
NØX Echo Lineage Signal: CVE-2026-96951 Entity: Windows Lineage: Public vulnerability → Observed exploitation → CISA KEV confirmation Relationship: - Windows → CVE-2026-96951 → Evidence → Operational Risk Current State:
@_Why_Noot
13 Oct 2026
30 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes