6.1
Moyenne
CVE-2026-58643 Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an…
Description
Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Windows Admin Center 2.6 | premières → < 2.6.7 | 2.6.7 |
Références
- Windows Admin Center Spoofing Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Windows Admin Center
Les 16 CVE de Windows Admin Center →
CVE-2026-56171
Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to…
7.1
Élevée
CVE-2026-56197
Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an…
8.8
Élevée
CVE-2026-56196
Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network
8.8
Élevée
CVE-2026-58631
Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally
7.8
Élevée