CVE-2026-42834
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
A vulnerability in Windows Admin Center due to improper access control. It allows an authorized attacker to elevate privileges over a network.
Risk Assessment
An authorized attacker can gain higher privileges, potentially leading to unauthorized access to network resources and further attack escalation.
Recommendation
Install a security update for Windows Admin Center that fixes the access control mechanism.
Other vulnerabilities in Windows Admin Center
See all- CVE-2026-41086High
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
- CVE-2026-35438High
Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
- CVE-2026-20965High
Improper verification of cryptographic signature in Windows Admin Center allows an authorized attacker to elevate privileges locally.
- CVE-2026-58643Medium
Cross-site scripting vulnerability in Windows Admin Center. An unauthorized attacker can exploit improper input neutralization during web page generation to perform spoofing over a network.
- CVE-2026-56197High
Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network.
- CVE-2026-56196High
A relative path traversal vulnerability in Windows Admin Center allows an authorized attacker to execute code over a network.
- CVE-2026-58631High
An improper authorization vulnerability in Windows Admin Center allows an authorized attacker to execute code locally.
- CVE-2026-57107High
Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally.
- CVE-2026-56185Medium
Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network.
- CVE-2026-56169High
An improper authentication vulnerability in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
Original NVD description (English source)
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.