Microsoft Windows Command Injection Vulnerability

CVE-2026-96951 is a command injection vulnerability affecting Microsoft Windows Shell. It allows an unauthorized remote attacker to bypass security features over a network without requiring authentication. The vulnerability has been flagged by CISA under BOD 26-04, which prioritizes security updates based on risk. Microsoft has published guidance through its Security Response Center (MSRC). CISA has also released implementation guidance for BOD 26-04 to assist organizations in prioritizing remediation. The vulnerability is tracked in the NVD as well. Its high Kans value indicates it is considered a critical or high-priority threat requiring prompt attention and patching.