Medium5.5Vendor: HighMicrosoft Server

Windows Shell Information Disclosure Vulnerability

CVE-2026-42906 Published Jun 9, 2026

Affected products & platforms

Microsoft ServerWindows Server

Summary

Windows Shell Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2022; Windows Server 2025.

Fixed versions

KB5094128 (build 10.0.20348.5256)
KB5094127 (build 10.0.19045.7417)
KB5094125 (build 10.0.26100.32995)
KB5094126 (build 10.0.26100.8655)
KB5093998 (build 10.0.22631.7219)
KB5095051 (build 10.0.28000.2269)

Official advisory · high-confidence parse· fetched 1 hour ago·verify at source

Recommended fix / mitigation

Install the applicable security update for your platform: KB5094128, KB5094127, KB5094125, KB5094126, KB5093998, KB5095051 (see the Microsoft Update Catalog).

Official advisory · high-confidence parse· fetched 1 hour ago·verify at source

What VulniPulse actually used to build this record — and why.

Microsoft Security Update Guide (MSRC)official
Official vendor feed — the source of truth for this advisory. VulniPulse polled this feed and parsed this entry from it.
Microsoft Server
Vendor advisory pageofficial
Advisory page fetched and parsed to extract affected/fixed versions and mitigation guidance beyond what the feed carries.
Microsoft Server

Validate CVE metadata against the authoritative registries.

Microsoft Update Catalog: KB5094128
Official documentation
Direct download of the KB5094128 security update named in the MSRC remediation data for this CVE.
Microsoft Update Catalog: KB5094127
Official documentation
Direct download of the KB5094127 security update named in the MSRC remediation data for this CVE.
Microsoft Update Catalog: KB5094125
Official documentation
Direct download of the KB5094125 security update named in the MSRC remediation data for this CVE.
MSRC Security Update Guide
Official documentation
Filter by this CVE for per-product KB numbers, severity and exploitability assessment.

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Windows Shell Information Disclosure Vulnerability

CVE-2026-42906 Published Jun 9, 2026

Affected products & platforms

Microsoft ServerWindows Server

Windows Shell Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2022; Windows Server 2025.

Fixed versions

KB5094128 (build 10.0.20348.5256)
KB5094127 (build 10.0.19045.7417)
KB5094125 (build 10.0.26100.32995)
KB5094126 (build 10.0.26100.8655)
KB5093998 (build 10.0.22631.7219)
KB5095051 (build 10.0.28000.2269)

Official advisory · high-confidence parse· fetched 1 hour ago·verify at source

Recommended fix / mitigation

Install the applicable security update for your platform: KB5094128, KB5094127, KB5094125, KB5094126, KB5093998, KB5095051 (see the Microsoft Update Catalog).

Official advisory · high-confidence parse· fetched 1 hour ago·verify at source

What VulniPulse actually used to build this record — and why.

Microsoft Security Update Guide (MSRC)official
Official vendor feed — the source of truth for this advisory. VulniPulse polled this feed and parsed this entry from it.
Microsoft Server
Vendor advisory pageofficial
Advisory page fetched and parsed to extract affected/fixed versions and mitigation guidance beyond what the feed carries.
Microsoft Server

Validate CVE metadata against the authoritative registries.

Microsoft Update Catalog: KB5094128
Official documentation
Direct download of the KB5094128 security update named in the MSRC remediation data for this CVE.
Microsoft Update Catalog: KB5094127
Official documentation
Direct download of the KB5094127 security update named in the MSRC remediation data for this CVE.
Microsoft Update Catalog: KB5094125
Official documentation
Direct download of the KB5094125 security update named in the MSRC remediation data for this CVE.
MSRC Security Update Guide
Official documentation
Filter by this CVE for per-product KB numbers, severity and exploitability assessment.

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.