[CVE-2026-96951] Microsoft Windows — Microsoft Windows Command Injection Vulnerability

What happened?

Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network. Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable.

Key details

• Citrix NetScaler ADC and NetScaler Gateway have a memory‑buffer bounds restriction flaw
• The flaw may enable remote code execution or cause denial of service
• Customers must conduct forensic triage as directed by BOD 26‑04 and follow Citrix’s mitigation guidance
• Apply mitigations per vendor instructions and comply with CISA’s BOD 26‑04 update guidance
• If mitigations are unavailable, discontinue use of the affected product
• Ransomware usage of this vulnerability is listed as unknown

Summarised by SecOraLens from CISA KEV. Always read the original source before acting. How SecOraLens verifies advisories.