Loading vulnerability…
Credential Disclosure in Microsoft PowerShell Core
CVE-2026-121674 is an information disclosure vulnerability in Microsoft PowerShell Core caused by insertion of sensitive information into transmitted data. An unauthenticated attacker could exploit the flaw over a network to obtain credentials. Successful exploitation requires user interaction and particular protocol settings or configurations. PowerShell 7.6.x releases earlier than 7.6.10 are affected, including installations on Windows and macOS. Microsoft rates the vulnerability Important, with a CVSS v3.1 base score of 6.1.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation can expose credentials and cause a high confidentiality impact, potentially affecting resources beyond the vulnerable component's security authority. The CVSS assessment identifies no direct integrity or availability impact.
Patch, then assume compromise.
Upgrade affected PowerShell installations to version 7.6.10, 7.7.0, or a later fixed release. Apply the applicable Microsoft security updates published on November 10, 2026.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
6 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.