Actively Exploited Windows Command Injection Vulnerability - 20261015001¶
Overview¶
The WASOC has observed newly published updates from Microsoft addressing a critical vulnerability affecting their products. Successful exploitation could allow an unauthorized attacker to bypass a security feature over a network.
What is vulnerable?¶
| Product(s) and Versions Affected | CVE | CVSS | Severity |
|---|---|---|---|
| Vendor listed affected products and versions | CVE-2026-96951 | 8.8 | High |
What has been observed?¶
Microsoft is aware of exploitation for one or more of the mentioned items. CISA has added one or more of the mentioned items to their Known Exploited Vulnerabilities catalog. The WASOC has not received any reports of exploitation of this vulnerability on Western Australian Government networks at the time of writing.
Recommendation¶
The WASOC recommends administrators apply the solutions as per vendor instructions to all affected devices within expected timeframes (refer Patch Management):