8.8
High
CVE-2026-41086 Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network
Description
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows Admin Center in Azure Portal 0.76 | earliest → < 0.76.0.0 | 0.76.0.0 |
References
- Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Windows Admin Center in Azure Portal
The 5 CVEs of Windows Admin Center in Azure Portal →
CVE-2026-42834
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network
7.8
High
CVE-2026-23660
Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally
7.8
High
CVE-2026-20965
Improper verification of cryptographic signature in Windows Admin Center allows an authorized attacker to elevate…
7.5
High
CVE-2025-29819
External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose…
6.2
Medium