SB20260812232 - Multiple vulnerabilities in PowerShell

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20260812232

SB20260812232 - Multiple vulnerabilities in PowerShell

Published: August 12, 2026

Security Bulletin ID SB20260812232
CSH Severity
High
Patch available
YES
Number of vulnerabilities 4
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 50% Medium 50%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 4 vulnerabilities.


1) Server-Side Request Forgery (SSRF) (CVE-ID: CVE-2026-58612)

CWE-ID: CWE-918 - Server-Side Request Forgery (SSRF)

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N]


The vulnerability allows a remote attacker to disclose sensitive information.

The vulnerability exists due to server-side request forgery (ssrf) in Microsoft PowerShell Core when handling network requests. A remote attacker can induce the application to make a crafted server-side request to disclose sensitive information.

User interaction is required for exploitation, and successful exploitation could disclose credentials.


2) Incorrect default permissions (CVE-ID: CVE-2026-59119)

CWE-ID: CWE-276 - Incorrect Default Permissions

CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to escalate privileges.

The vulnerability exists due to incorrect default permissions in PowerShell when processing controlled inputs. A local user can send controlled inputs to escalate privileges.

Successful exploitation could grant SYSTEM privileges. User interaction is required.


3) Code Injection (CVE-ID: CVE-2026-70338)

CWE-ID: CWE-94 - Improper Control of Generation of Code ('Code Injection')

CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to bypass a security feature.

The vulnerability exists due to improper control of generation of code ('code injection') in Microsoft PowerShell when processing crafted local input. A remote attacker can supply crafted input to bypass a security feature.

User interaction is required. Successful exploitation could bypass Windows Defender Application Control and PowerShell Constrained Language Mode restrictions, allowing untrusted code to run with capabilities those protections are designed to block.


4) Relative Path Traversal (CVE-ID: CVE-2026-70337)

CWE-ID: CWE-23 - Relative Path Traversal

CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to execute arbitrary code.

The vulnerability exists due to relative path traversal in Microsoft PowerShell Core when processing a server response from a malicious server. A remote attacker can host a malicious server and convince a user to connect to it to execute arbitrary code.

User interaction is required.


Remediation

Install update from vendor's website.

References