PT-2026-20332 · Microsoft · Windows Admin Center

Andrea Pierini + 1 · Published 2026-02-17 · Updated 2026-02-20 · CVE-2026-26119

Positive Technologies · (AI Summary)

CVSS v3.1

8.8

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Admin Center versions prior to 2511 Windows Admin Center version 1809.0

Description An improper authentication issue exists in Windows Admin Center, potentially allowing an authorized attacker to elevate privileges on a network. This flaw could grant an attacker the rights of the user running the application, and in certain scenarios, could lead to full domain compromise. The vulnerability is rated as high severity with a CVSS score of 8.8. No information is available regarding the number of potentially affected devices worldwide or any real-world incidents where this issue was exploited.

Recommendations Update Windows Admin Center to version 2511 or later. Update Windows Admin Center to a version later than 1809.0.

Fix

LPE

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2026-26119

Affected Products

Windows Admin Center

References · 56

• https://nvd.nist.gov/vuln/detail/CVE-2026-26119 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26119 · Vendor Advisory
• https://t.me/msrcreports/3029 · Telegram Post
• https://twitter.com/RigneySec/status/2024558914445230482 · Twitter Post
• https://twitter.com/tatha_gautama/status/2024860651664134273 · Twitter Post
• https://twitter.com/apemanor/status/2024892100903342164 · Twitter Post
• https://twitter.com/UndercodeUpdate/status/2024128362894004367 · Twitter Post
• https://twitter.com/talentxfactor/status/2024578607448814021 · Twitter Post
• https://twitter.com/IT_news_for_all/status/2024540795986993625 · Twitter Post
• https://twitter.com/molari999/status/2024560009812521301 · Twitter Post
• https://twitter.com/helpdeskdotlive/status/2024286913444692067 · Twitter Post
• https://t.me/defcon_news/134080 · Telegram Post
• https://twitter.com/TheHackerWire/status/2023900001118896142 · Twitter Post
• https://t.me/CVEtracker/44927 · Telegram Post
• https://twitter.com/unhingedcyberz/status/2024826942755688732 · Twitter Post