Skip to main content

Windows Admin Center EUVDEUVD-2026-44252

| CVE-2026-56197 HIGH
Command Injection (CWE-77)
2026-07-14 microsoft GHSA-x23w-f7cc-jghm
8.8
CVSS 3.1 · Vendor: microsoft
Temporal: 7.7
Share

Severity by source

Vendor (microsoft) PRIMARY
8.8 HIGH
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
ENISA EUVD
HIGH
qualitative
CIRCL (temporal)
7.7 HIGH
cvss

Primary rating from Vendor (microsoft).

CVSS VectorVendor: microsoft

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

2
Analysis Generated
Jul 14, 2026 - 19:04 vuln.today
CVE Published
Jul 14, 2026 - 17:09 nvd
HIGH 8.8

DescriptionCVE.org

Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network.

AnalysisAI

Authenticated remote code execution in Microsoft Windows Admin Center (CWE-77) lets an attacker with low-privilege access inject and run arbitrary commands over the network, yielding full confidentiality, integrity, and availability compromise (CVSS 8.8). Microsoft has released a patch; there is no public exploit identified at time of analysis and the flaw is not listed in CISA KEV.

CVE-2026-62873 CRITICAL
9.8 Aug 07

Privilege elevation in Microsoft 365 Admin Center allows a remote, unauthenticated attacker to gain elevated permissions

CVE-2026-56196 HIGH
8.8 Jul 14

Remote code execution in Microsoft Windows Admin Center allows an authenticated attacker to run arbitrary code over the

CVE-2026-56169 HIGH
8.8 Jul 14

Privilege elevation in Microsoft Windows Admin Center (versions 1809.0 through 2.7.3) lets an already-authenticated, low

CVE-2019-0813 CRITICAL
9.8 Apr 09

An elevation of privilege vulnerability exists when Windows Admin Center improperly impersonates operations in certain s

CVE-2026-58631 HIGH
7.8 Jul 14

Local privilege-to-code-execution in Microsoft Windows Admin Center lets an already-authenticated, lower-privileged user

CVE-2026-57107 HIGH
7.8 Jul 14

Local privilege escalation in Microsoft Windows Admin Center allows an already-authenticated, low-privileged attacker to

CVE-2026-26119 HIGH
8.8 Feb 17

Windows Admin Center's authentication mechanism can be bypassed by authenticated network users to gain elevated privileg

CVE-2026-35438 HIGH
8.3 May 12

Privilege escalation in Microsoft Windows Admin Center (versions 1809.0 before 2.6.5.16) allows an already-authenticated

CVE-2026-23660 HIGH
7.8 Mar 10

Windows Admin Center in Azure Portal contains an access control flaw that enables local authenticated users to escalate

CVE-2026-56185 MEDIUM
6.5 Jul 14

Improper authentication in Windows Admin Center (versions prior to 2.6.5.16) enables an authenticated low-privilege atta

CVE-2026-56171 HIGH
7.5 Jul 17

Information disclosure in Microsoft Remote Desktop Web Client (before 2.1.65.2) and Windows Admin Center (before 2.7.4)

CVE-2026-20965 HIGH
7.5 Jan 13

Windows Admin Center fails to properly validate cryptographic signatures, enabling high-privileged users to bypass secur

Share

EUVD-2026-44252 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy