CVE-2026-50523
No fix known EPSS <1%CVSS 7.8
Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.
Products: Microsoft PowerShell 7.4, Microsoft PowerShell 7.5, Microsoft PowerShell 7.6