CVE-2026-26143

• Microsoft/Powershell

  cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*

  Range: >=7.4,<7.4.14

No patches discovered yet.

AI mechanics synthesis has not run for this CVE yet.

• msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26143nvdVendor Advisory

• What 45 Days of Watching Your Own Tools Will Tell You About Your Real Attack Surface
  The Hacker News · May 15, 2026
• The time of much patching is coming
  Cisco Talos Intelligence · May 14, 2026
• When IT Support Calls: Dissecting a ModeloRAT Campaign from Teams to Domain Compromise
  Rapid7 Blog · May 13, 2026
• State-sponsored actors, better known as the friends you don’t want
  Cisco Talos Intelligence · May 12, 2026
• Cookie thieves caught stealing dev secrets via fake Claude Code installers
  The Register Security · May 11, 2026
• Zero Chaos: Scaling Detection Engineering at the Speed of Software, with Detection As Code
  Rapid7 Blog · May 8, 2026
• Muddying the Tracks: The State-Sponsored Shadow Behind Chaos Ransomware
  Rapid7 Blog · May 6, 2026
• Attackers adopt JavaScript runtime Bun to spread NWHStealer
  Malwarebytes Labs · May 6, 2026
• UAT-8302 and its box full of malware
  Cisco Talos Intelligence · May 5, 2026
• CloudZ RAT potentially steals OTP messages using Pheno plugin
  Cisco Talos Intelligence · May 5, 2026
• VECT: Ransomware by design, Wiper by accident
  Check Point Research · Apr 28, 2026
• Hypersonic Supply Chain Attacks: One Solution That Didn’t Need to Know the Payload
  SentinelOne Labs · Apr 22, 2026
• IR Trends Q1 2026: Phishing reemerges as top initial access vector, as attacks targeting public administration persist
  Cisco Talos Intelligence · Apr 22, 2026
• Kyber Ransomware Double Trouble: Windows and ESXi Attacks Explained
  Rapid7 Blog · Apr 21, 2026
• DFIR Report – The Gentlemen & SystemBC: A Sneak Peek Behind the Proxy
  Check Point Research · Apr 20, 2026
• Metasploit Wrap-Up 04/17/2026
  Rapid7 Blog · Apr 17, 2026
• The Good, the Bad and the Ugly in Cybersecurity – Week 16
  SentinelOne Labs · Apr 17, 2026
• ClickFix Phishing Campaign Masquerading as a Claude Installer
  Rapid7 Blog · Apr 16, 2026
• PowMix botnet targets Czech workforce
  Cisco Talos Intelligence · Apr 16, 2026
• The n8n n8mare: How threat actors are misusing AI workflow automation
  Cisco Talos Intelligence · Apr 15, 2026
• Securing the Software Supply Chain: How SentinelOne’s AI EDR Autonomously Blocked the CPU-Z Watering Hole Cyber Attack
  SentinelOne Labs · Apr 14, 2026
• Patch Tuesday - April 2026
  Rapid7 Blog · Apr 14, 2026
• The Good, the Bad and the Ugly in Cybersecurity – Week 14
  SentinelOne Labs · Apr 3, 2026
• “Handala Hack” – Unveiling Group’s Modus Operandi
  Check Point Research · Mar 12, 2026