8.3
High
CVE-2026-35438 Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network
Description
Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows Admin Center 2.6 | earliest → < 2.6.5.16 | 2.6.5.16 |
References
- Windows Admin Center Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Windows Admin Center
The 16 CVEs of Windows Admin Center →
CVE-2026-56171
Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to…
7.1
High
CVE-2026-58643
Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an…
6.1
Medium
CVE-2026-56197
Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an…
8.8
High
CVE-2026-56196
Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network
8.8
High