CVE-2026-26143

CVE-2026-26143 is an improper input validation vulnerability in Microsoft PowerShell that permits unauthorized attackers to bypass a security feature through local access. The flaw affects PowerShell installations and requires user interaction to exploit. The vulnerability carries a HIGH severity rating with a CVSS score of 7.8, reflecting its potential for significant impact. The attack requires local access with no privileges needed, but involves relatively low complexity. Successful exploitation could result in high confidentiality, integrity, and availability impact, enabling attackers to compromise affected systems. There is currently no evidence of active exploitation in the wild, and the vulnerability does not appear on the CISA Known Exploited Vulnerabilities list. The EPSS score of 0.0009 indicates minimal real-world exploitation probability relative to other CVEs. However, the moderate FAUCET Risk Score of 48.0 suggests organizations should prioritize patching given the local attack vector and the potential for user-driven compromise.