CVE-2026-96951

Vendor

Microsoft

Product

Windows

CVSS v3.0

8.8

EPSS

0.098 (p96)

CISA KEV

added 13 Oct 2026, due 16 Oct 2026 (16d overdue)

Weakness

CWE-77

Exposure class

Operating system, Edge / VPN / firewall, Network management, Endpoint security

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 68
   KEV CISA KEV 19d ago

   Microsoft Windows Command Injection Vulnerability

   Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network.

   KEV · due 16 Oct 2026 (overdue) Fix available CVE-2026-96951 Microsoft
2. 80
   CISA alert CISA 18d ago

   CISA Adds Two Known Exploited Vulnerabilities to Catalog

   CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-96951 Microsoft Windows Command Injection Vulnerability CVE-2026-104935 Ivanti…

   Exploited EPSS 0.87 CVE-2026-96951CVE-2026-104935 Microsoft Ivanti
3. 55
   Ivanti advisory Ivanti 18d ago

   October 2026 Patch Tuesday

   What's happened since September Patch Tuesday Here’s a fun fact to start this month. Ivanti’s Vulnerability Knowledge Base is now tracking more than 406,000 CVEs. Over 78,000 of them were disclosed in 2026 alone, which is more…

   Exploited CVSS 8.7 No fix yet CVE-2026-88779CVE-2026-104286CVE-2026-102255+11 more Ivanti
4. 54
   Tenable research Tenable 18d ago

   Microsoft’s October 2026 Patch Tuesday addresses 1407 CVEs (CVE-2026-96951)

   69 Critical 1337 Important 0 Moderate 1 Low Microsoft addresses 1407 CVEs in the tenth Patch Tuesday of 2026, marking the second consecutive month to reset the bar as the largest Patch Tuesday release. This month’s updates…

   Exploited CVSS 8.8 Fix available CVE-2026-96951CVE-2026-21510CVE-2026-32202+20 more Microsoft
5. 51
   Research Rapid7 18d ago

   Patch Tuesday - October 2026

   Microsoft is publishing 1,413 own-product vulnerabilities on October 2026 Patch Tuesday , including 1,102 vulnerabilities in Windows. Anyone who enjoyed last month’s record-setting Patch Tuesday will love the October 2026…

   Exploited Fix available CVE-2026-96951CVE-2026-108398CVE-2026-70242+5 more Microsoft Rapid7
6. 32
   Talos research Talos 18d ago

   Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities

   Microsoft has released its monthly security update for October 2026, which includes 1415 vulnerabilities affecting a range of products, including 85 that Microsoft marked as "critical."

   Fix available CVE-2026-96951CVE-2026-70229CVE-2026-70571+57 more Microsoft Cisco
7. 22
   Research Check Point Research 12d ago

   19th October – Threat Intelligence Report

   For the latest discoveries in cyber research for the week of 19th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES CenterPoint Energy, a US utility company serving Texas and several other…

   EPSS 0.27 CVE-2026-35029CVE-2026-59823CVE-2026-96951+4 more
8. 19
   Qualys TRU Qualys 18d ago

   Microsoft Patch Tuesday, October 2026 Security Update Review

   Microsoft has released its October 2026 Patch Tuesday security updates, addressing vulnerabilities across its products and services. As organizations continue to navigate an evolving threat landscape, applying security patches…

   Fix available CVE-2026-96951CVE-2026-108398CVE-2026-105016+57 more Microsoft
9. 16
   Research ZDI 18d ago

   The October 2026 Security Update Review

   Another month of patches equals another new record for Microsoft patches. It’s a good thing I survive Pwn2Own Ireland , because between these and the Adobe patches, there’s much to discuss. I’m also looking at different ways I…

   CVE-2026-75650CVE-2026-106631CVE-2026-108398+57 more Microsoft Adobe
10. 14
    KrebsOnSecurity Krebs 18d ago

    Microsoft Patches More Than 1,400 Security Flaws

    Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000 fixes, which was already about…

    CVE-2026-108398CVE-2026-96951 Microsoft