CVE-2026-96303: Microsoft PowerShell security check bypass

CVE-2026-96303 · Severity: medium · CVSS 6.5 · Published 2026-10-13

Microsoft PowerShell contains an improperly implemented security check that allows an attacker to bypass a security feature over the network. This could allow an unauthorized attacker to perform actions that should have been blocked by PowerShell's security controls, potentially leading to unauthorized code execution or system compromise.

Technologies: Microsoft PowerShell. Vendors: Microsoft.

Quick answers

Is CVE-2026-96303 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-96303 being exploited in the wild.
How severe is CVE-2026-96303?
Medium severity, with a CVSS score of 6.5, published 13 October 2026.
Which products and versions are affected?
Microsoft PowerShell.
Is there a fix for CVE-2026-96303?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-96303 attacked?
It is attacked over the network.
Am I affected by CVE-2026-96303?
Check whether you run Microsoft PowerShell. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An improperly implemented security check in Microsoft PowerShell allows remote attackers to bypass an intended security feature. The vulnerability is exploitable over the network and does not require user interaction or prior authentication. An attacker who successfully exploits this could bypass PowerShell's security mechanisms to execute unauthorized operations.

Affected products

  • Microsoft PowerShell

Timeline

  • 2026-10-13: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.