Microsoft Windows command-injection bug added to CISA's exploited list
On October 13, 2026, CISA added CVE-2026-96951, a command-injection vulnerability in Microsoft Windows, to the Known Exploited Vulnerabilities catalog because of evidence it was being exploited.