Alpine: powershell: security update to 7.6.9-r0

high Tenable Cloud Security Plugin ID 478239

Description

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

- Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to
disclose information over a network. (CVE-2026-58612)

- Improper neutralization of special elements used in a command ('command injection') in Microsoft
PowerShell allows an authorized attacker to execute code locally. (CVE-2026-50523)

- Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges
locally. (CVE-2026-59119)

- Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over
a network. (CVE-2026-70337)

Solution

Update the powershell library and its related packages to version 7.6.9-r0 or later.

Plugin Details

Severity: High

ID: 478239

Version: Revision 1.1

Type: Local

Family: Alpine Linux Local Security Checks

Published: 11/3/2026

Updated: 11/3/2026

Supported Sensors: Agentless Assessment

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 58.15

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 5.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N

CVSS Score Source: CVE-2026-58612

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS Score Source: CVE-2026-70338

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 8/11/2026

Reference Information

CVE: CVE-2026-50523, CVE-2026-58612, CVE-2026-59119, CVE-2026-70337, CVE-2026-70338, CVE-2026-96251, CVE-2026-96303

IAVA: 2026-A-0844-S, 2026-A-1131

Detections

Analytics