Skip to main content

Windows Admin Center CVE-2026-56185

| EUVDEUVD-2026-43757 MEDIUM
Improper Authentication (CWE-287)
2026-07-14 microsoft GHSA-rgqw-chxv-cccq
6.5
CVSS 3.1 · Vendor: microsoft
Temporal: 5.7
Share

Severity by source

Vendor (microsoft) PRIMARY
6.5 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
ENISA EUVD
HIGH
qualitative
CIRCL (temporal)
5.7 MEDIUM
cvss

Primary rating from Vendor (microsoft).

CVSS VectorVendor: microsoft

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Jul 14, 2026 - 17:05 nvd
MEDIUM 6.5

DescriptionCVE.org

Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network.

Analysis

Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network.

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts

Free forever · No credit card required

Threat intelligence, references, and detailed analysis are available after sign-in.

CVE-2026-56196 HIGH
8.8 Jul 14

Remote code execution in Microsoft Windows Admin Center allows an authenticated attacker to run arbitrary code over the

CVE-2026-56197 HIGH
8.8 Jul 14

Authenticated remote code execution in Microsoft Windows Admin Center (CWE-77) lets an attacker with low-privilege acces

CVE-2019-0813 CRITICAL
9.8 Apr 09

An elevation of privilege vulnerability exists when Windows Admin Center improperly impersonates operations in certain s

CVE-2026-56169 HIGH
8.1 Jul 14

Privilege elevation in Microsoft Windows Admin Center allows an already-authenticated (low-privileged) network attacker

CVE-2026-58631 HIGH
7.8 Jul 14

Local privilege-to-code-execution in Microsoft Windows Admin Center lets an already-authenticated, lower-privileged user

CVE-2026-57107 HIGH
7.8 Jul 14

Local privilege escalation in Microsoft Windows Admin Center allows an already-authenticated, low-privileged attacker to

CVE-2026-26119 HIGH
8.8 Feb 17

Windows Admin Center's authentication mechanism can be bypassed by authenticated network users to gain elevated privileg

CVE-2026-23660 HIGH
7.8 Mar 10

Windows Admin Center in Azure Portal contains an access control flaw that enables local authenticated users to escalate

CVE-2026-20965 HIGH
7.5 Jan 13

Windows Admin Center fails to properly validate cryptographic signatures, enabling high-privileged users to bypass secur

CVE-2023-29347 MEDIUM
6.8 Jul 11

Windows Admin Center Spoofing Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitabl

CVE-2025-29819 MEDIUM
6.2 Apr 08

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose i

CVE-2021-27066 MEDIUM
4.3 Mar 11

Windows Admin Center Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.3), this vulnerability is remo

Share

CVE-2026-56185 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy