CVE-2026-121669: PowerShell Information Disclosure Vulnerability

Q: What does an attacker need to exploit this issue?

An attacker must be able to reach the affected PowerShell Core instance over a network and must persuade a user to interact with the attack. No privileges are required before exploitation.

Q: What is the likely impact if exploitation succeeds?

Successful exploitation can disclose information, including credentials that are insufficiently protected. The available scoring indicates confidentiality impact is high, while integrity and availability impact are not indicated.

Q: Is exploitation known to be occurring?

The provided exploit maturity rating is E:U, which does not indicate known exploitation. The attack complexity is rated high.

Published Nov 10, 2026

Updated

Insufficiently protected credentials in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.

Other sources

PowerShell Information Disclosure Vulnerability

— Microsoft

Affected Software

2 affected componentsFixes available

Microsoft PowerShell>=7.7<7.7.0

7.7.0

Microsoft PowerShell>=7.6<7.6.10

7.6.10

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7.7.0
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7.6.10

Event History

Nov 10, 2026

CVE Published

via Microsoft·04:00 PM

Data Sourced

via Microsoft·04:00 PM

DescriptionSeverityWeakness

Data Sourced

via Microsoft·04:00 PM

Affected Software

CVE Published

via MITRE·06:23 PM

Data Sourced

via MITRE·06:23 PM

DescriptionSeverity

Data Sourced

via NVD·07:20 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

An attacker must be able to reach the affected PowerShell Core instance over a network and must persuade a user to interact with the attack. No privileges are required before exploitation.

What is the likely impact if exploitation succeeds?

Successful exploitation can disclose information, including credentials that are insufficiently protected. The available scoring indicates confidentiality impact is high, while integrity and availability impact are not indicated.

Is exploitation known to be occurring?

The provided exploit maturity rating is E:U, which does not indicate known exploitation. The attack complexity is rated high.

CVE-2026-121669: PowerShell Information Disclosure Vulnerability

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the likely impact if exploitation succeeds?

Is exploitation known to be occurring?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the likely impact if exploitation succeeds?

Is exploitation known to be occurring?