WATCHExploited vulnerability
Microsoft Windows
Microsoft Windows Command Injection Vulnerability
What's happening and what to do
An unauthorized attacker over a network can bypass a Windows security feature through a command injection flaw, and this flaw is being actively exploited. Microsoft Windows Shell. Apply the vendor's update now and check for signs of compromise.
AI summary of the sources on this page. Regenerated when a source changes.
Signals over time
- 2026-10-13Added to CISA's Known Exploited Vulnerabilities catalog.
- 2026-10-16Federal patch deadline for US agencies.
- 2026-11-03 21:55First seen here.
Source text
Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network.