{"id":"CVE-2026-122985","aliases":[],"cve":{"records":[{"id":"CVE-2026-122985","source":"microsoft","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-11-05T00:51:41.907Z","published":"2026-11-10T18:20:41.370Z","modified":"2026-11-13T18:09:27.244Z"}],"publishers":[{"name":"microsoft","role":"CNA","organizationId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","modified":"2026-11-13T18:09:27.244Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-11T01:31:34.970Z"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122985","tags":["vendor-advisory","patch"],"source":"microsoft"}],"weaknesses":[{"id":"CWE-611","description":"CWE-611: Improper Restriction of XML External Entity Reference","source":"microsoft"}],"applicability":[{"source":"microsoft","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.10"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powershell_7.7:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"7.7.0"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-11T01:29:53.962872Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Microsoft PowerShell Information Disclosure Vulnerability","titleSource":"microsoft","descriptionSource":"microsoft","description":"Improper restriction of xml external entity reference in Microsoft PowerShell allows an unauthorized attacker to disclose information over a network.","score":6.1,"severity":"medium","published":"2026-11-10T18:20:41.370Z","modified":"2026-11-13T18:09:27.244Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Microsoft","name":"PowerShell 7.6","platforms":[],"versions":[{"version":"7.6.0","status":"affected","lessThan":"7.6.10","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-122985"},{"vendor":"Microsoft","name":"PowerShell 7.7","platforms":[],"versions":[{"version":"1.0.0","status":"affected","lessThan":"7.7.0","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-122985"}],"remediation":[],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122985"],"sources":[{"name":"CVE","id":"CVE-2026-122985","modified":"2026-11-13T18:09:27.244Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-122985"}],"assessments":[{"source":"microsoft","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","score":6.1}],"sourceAffected":[],"observedAt":"2026-11-13T18:36:53.489Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T02:00:33.565Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-11T02:30:33.645Z","attemptedAt":"2026-11-11T02:30:33.645Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-11T02:30:33.645Z","attemptedAt":"2026-11-11T02:30:33.645Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-11T02:30:33.645Z","attemptedAt":"2026-11-11T02:30:33.645Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-11T02:30:33.645Z","attemptedAt":"2026-11-11T02:30:33.645Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-122130","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-122130","modified":"Nov 11, 2026, 1:31:34 AM","score":6.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","checkedAt":"2026-11-11T02:30:33.645Z"},{"source":"NVD","id":"CVE-2026-122985","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-122985","modified":"2026-11-11T02:17:12.520","score":6.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","checkedAt":"2026-11-11T02:30:33.645Z"},{"source":"GitHub Advisory Database","id":"GHSA-89hg-g75m-rjvg","url":"https://github.com/advisories/GHSA-89hg-g75m-rjvg","modified":"2026-11-10T21:33:53Z","score":6.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","checkedAt":"2026-11-11T02:30:33.645Z"}],"aiSummary":{"text":"Microsoft PowerShell 7.6.0 to 7.6.10 and PowerShell 7.7 versions before 7.7.0 have an information disclosure vulnerability due to improper restriction of XML external entity references. An attacker can disclose information over a network. The vulnerability is identified as CWE-611.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-11T02:11:05.703Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-122985"}]}}