Sign in

7.8 High

CVE-2026-42834 Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network

Description

Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.

Affected products and versions

Product	Affected versions	Fixed in
Windows Admin Center in Azure Portal 1.0	1.0 → latest	No fix stated

The 5 CVEs of Windows Admin Center in Azure Portal →

CVE-2026-41086 Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network 8.8 High CVE-2026-23660 Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally 7.8 High CVE-2026-20965 Improper verification of cryptographic signature in Windows Admin Center allows an authorized attacker to elevate… 7.5 High CVE-2025-29819 External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose… 6.2 Medium

Track this CVE