Home / Vulnerability Intelligence / CVE-2026-32191

CVE-2026-32191 - Vulnerability Analysis

CriticalCVSS: 9.8

Last Updated: March 19, 2026

Microsoft Bing Images - Command Injection

Published: March 19, 2026Updated: March 19, 2026Remote Exploitable

Overview

Microsoft Bing Images contains a command injection caused by improper neutralization of special elements in OS commands, letting unauthorized attackers execute code remotely, exploit requires network access.

Severity & Score

Severity: Critical

CVSS Score: 9.8

EPSS Score: 0.0%(Probability of exploitation in next 30 days)

Impact

Unauthorized attackers can execute arbitrary code remotely, potentially compromising the system.

Mitigation

Update to the latest version of Microsoft Bing Images.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32191

Social Media Activity(2 posts)

TheHackerWire

@thehackerwire

Mar 19, 2026

🔴 CVE-2026-32191 - Critical (9.8) Improper neutralization of special elements used in an os command ('os command injection') in Microsoft Bing Images allows an unauthorized attacker to execute code over a network. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-32191/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

TheHackerWire

@thehackerwire

Mar 19, 2026

View original post

Related Resources

Details

CVE ID: CVE-2026-32191
Severity: Critical
CVSS Score: 9.8
Type: command_injection
Status: new
EPSS: 0.0%
Social Posts: 2

CWE

CWE-78

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.0%Probability of exploitation in the next 30 days