7.8
High
CVE-2026-58631 Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally
Description
Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows Admin Center 2.7 | earliest → < 2.7.4 | 2.7.4 |
References
- Windows Admin Center (WAC) Remote Code Execution Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Windows Admin Center
The 16 CVEs of Windows Admin Center →
CVE-2026-56171
Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to…
7.1
High
CVE-2026-58643
Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an…
6.1
Medium
CVE-2026-56197
Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an…
8.8
High
CVE-2026-56196
Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network
8.8
High