KEV Entry

CVE-2026-96951

Known Exploited Vulnerability Entry ENISA

Back to Catalog View Vulnerability
Entry Details
Confirmed Exploited

CVE-2026-96951

2026-09-25 00:00 UTC

Timestamps

2026-09-25

2026-09-25

Scope

Affected: Microsoft / Windows version 8.1 and above | Description: Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. In an email or instant message attack scenario, the attacker could send the targeted user a specially crafted file that is designed to exploit the vulnerability. | Patched since: 2026/10/13 | Exploitation type: unknown | CWEs: CWE-77 | Origin source: CSIRT-IE | Notes: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96951

References
  • {'id': 'CVE-2026-96951', 'url': 'https://www.cve.org/CVERecord?id=CVE-2026-96951'}
  • {'id': 'EUVD-2026-100274', 'url': 'https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100274'}
  • {'id': 'source', 'url': 'https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96951'}

d11dd625-8b4e-4803-8ef3-7ba9986c5697

ENISA
cce329bf-df49-4c6e-a027-80be2e6483bd

2026-11-04 13:00 UTC

2026-11-04 13:00 UTC

Evidence
1
Type Source Signal Confidence Details GCVE Metadata
csirt_report enisa-cnw-kev successful_exploitation 0.75
View details 
{
  "catalog": "ENISA / EU CSIRTs Network (CNW) KEV JSON",
  "cwes": [
    "CWE-77"
  ],
  "dateReported": "2026/09/25",
  "euvd": "EUVD-2026-100274",
  "exploitationType": [
    "unknown"
  ],
  "notes": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96951",
  "originSource": "CSIRT-IE",
  "patchedSince": "2026/10/13",
  "product": "Windows version 8.1 and above",
  "threatActorsExploiting": [],
  "vendorProject": "Microsoft",
  "vulnerabilityName": ""
}
 -
Export Options
JSON Object JSON API View Full Catalog