CVE-2026-26143: Microsoft PowerShell

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.

Affected products

• Microsoft PowerShell: from 7.4, before 7.4.14 (fixed in 7.4.14); from 7.5, before 7.5.5 (fixed in 7.5.5)

Published 2026-04-14. Last modified 2026-06-17.