High MSRC-CVE-2026-58612 1 CVE

PowerShell Information Disclosure Vulnerability

Published Aug 11, 2026 · Updated Sep 3, 2026 · Revision 4

Vendor: Microsoft

Summary

Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What type of information could be disclosed by this vulnerability?
Exploiting this vulnerability could allow the disclosure of credentials.

Vulnerabilities 1

High 7.4

CVE-2026-58612

PowerShell Information Disclosure Vulnerability

Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.

Microsoft PowerShell 7.4 PowerShell 7.5 PowerShell 7.6 Alpine

Aug 11, 2026

Revision history

2026-09-03 #4
Updated an acknowledgement. This is an informational change only.
2026-08-17 #3
Acknowledgement Updated
2026-08-14 #2
The security updates for Powershell have been updated.
2026-08-11 #1
Information published.

References

CVE-2026-58612 PowerShell Information Disclosure Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58612
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss