CVE-2026-41086
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
Risk Assessment
The organization may be exposed to unauthorized access to resources and the potential for privilege escalation by an attacker.
Recommendation
It is recommended to review and strengthen access control mechanisms in Windows Admin Center to prevent privilege escalation.
Other vulnerabilities in Windows Admin Center
See all- CVE-2026-20965High
Improper verification of cryptographic signature in Windows Admin Center allows an authorized attacker to elevate privileges locally.
- CVE-2026-58643Medium
Cross-site scripting vulnerability in Windows Admin Center. An unauthorized attacker can exploit improper input neutralization during web page generation to perform spoofing over a network.
- CVE-2026-56197High
Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network.
- CVE-2026-56196High
A relative path traversal vulnerability in Windows Admin Center allows an authorized attacker to execute code over a network.
- CVE-2026-58631High
An improper authorization vulnerability in Windows Admin Center allows an authorized attacker to execute code locally.
- CVE-2026-57107High
Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally.
- CVE-2026-56185Medium
Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network.
- CVE-2026-56169High
An improper authentication vulnerability in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
- CVE-2026-42834High
A vulnerability in Windows Admin Center due to improper access control. It allows an authorized attacker to elevate privileges over a network.
- CVE-2026-35438High
Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
Original NVD description (English source)
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS