285 matches found
CVE-2026-26119
CVE-2026-26119 WAC RCE - CVE-2026-26119 RCE autenticado en Windows Admin Center mediante WinREST/PowerShell invokeCommand. Uso: root@kitploit: python3 wacrce.py "" WACPASS= python3 wacrce.py Entorno: root@kitploit: WACBASE - override target base URL default below WACPASS - password, used if not...
CVE-2026-26119
CVE-2026-26119 WAC RCE - CVE-2026-26119 Windows Admin Center authenticated RCE via WinREST/PowerShell invokeCommand. Usage: root@kitploit: python3 wacrce.py "" WACPASS= python3 wacrce.py Env: root@kitploit: WACBASE - override target base URL default below WACPASS - password, used if not passed...
CVE-2023-37756-CWE-521-lead-to-malicious-plugin-upload-in-the-i-doit-Pro-25-and-below
CVE-2023-37756 – Requisito di password debole nell'admin-center che porta al caricamento di plugin dannosi in i-doit Pro 25 e versioni precedenti i-doit Pro 25 e versioni precedenti sono vulnerabili a una vulnerabilità di requisiti di password deboli nell'admin-center e al caricamento di plugin...
CVE-2026-62873
Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-62873
Microsoft 365 Admin Center is affected by CVE-2026-62873 due to improper verification of cryptographic signatures, enabling elevated privileges over a network for an unauthorized attacker. The vulnerability details provided across sources (NVD, ENISA EUVD, CVE listing, and MSRC) confirm the issue...
CVE-2026-62873 Microsoft 365 Admin Center Elevation of Privilege Vulnerability
...
CVE-2026-62873
Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network...
Microsoft 365 Admin Center Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network...
KLA91190 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of...
Security Updates for Microsoft Windows Admin Center (July 2026)
The Microsoft Windows Admin Center installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network. CVE-2026-56169 - Improper...
CVE-2026-58643
Improper neutralization of input during web page generation 'cross-site scripting' in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-58643 Windows Admin Center Spoofing Vulnerability
...
CVE-2026-58643 Windows Admin Center Spoofing Vulnerability
...
CVE-2026-58643
CVE-2026-58643 describes an improper neutralization of input during web page generation (XSS) in Windows Admin Center, enabling spoofing over a network. Affected component: Windows Admin Center frontend/web page rendering. Root cause: inadequate input handling during page generation. Impact: netw...
CVE-2026-14371
The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing remote PowerShell commands...
EUVD-2026-44978
The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing remote PowerShell commands...
CVE-2026-14371
The vulnerability CVE-2026-14371 affects Lenovo XClarity Integrator for Windows Admin Center plugin (WAC Gateway) version 5.1.1 and earlier. The issue is a Powershell Command Injection when establishing remote PowerShell commands, with a CVSS v4.0 base score of 8.8 (HIGH) and impact across confid...
Windows Admin Center Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network...
PT-2026-60597
Name of the Vulnerable Software and Affected Versions Windows Admin Center affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting XSS issue. This allows an unauthorized attacker to perform spoofing over a network...