213 matches found
CVE-2026-26119
CVE-2026-26119 WAC RCE - CVE-2026-26119 WinREST/PowerShell invokeCommand を介した Windows Admin Center の認証済み RCE。 Usage: root@kitploit: python3 wacrce.py "" WACPASS= python3 wacrce.py Env: root@kitploit: WACBASE - override target base URL default below WACPASS - password, used if not passed...
CVE-2026-26119
CVE-2026-26119 WAC RCE - CVE-2026-26119 Windows Admin Center の認証済み RCE WinREST/PowerShell invokeCommand 経由。 使用法: root@kitploit: python3 wacrce.py "" WACPASS= python3 wacrce.py 環境変数: root@kitploit: WACBASE - ターゲットのベース URL を上書き デフォルトは以下 WACPASS - パスワード、位置引数で渡されなかった場合に使用 root@kitploit:...
Security Updates for Microsoft Windows Admin Center (July 2026)
The Microsoft Windows Admin Center installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network. CVE-2026-56169 - Improper...
The vulnerability of Windows Admin Center, related to the lack of measures taken to protect the website structure, allows attackers to perform spear-phishing attacks.
The vulnerability of the Windows Admin Center management tool is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
EUVD-2026-45060
Improper neutralization of input during web page generation 'cross-site scripting' in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-58643
Improper neutralization of input during web page generation 'cross-site scripting' in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-58643 Windows Admin Center Spoofing Vulnerability
...
CVE-2026-58643 Windows Admin Center Spoofing Vulnerability
...
CVE-2026-58643
Improper neutralization of input during web page generation 'cross-site scripting' in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-58643
CVE-2026-58643 describes an improper neutralization of input during web page generation (XSS) in Windows Admin Center, enabling spoofing over a network. Affected component: Windows Admin Center frontend/web page rendering. Root cause: inadequate input handling during page generation. Impact: netw...
CVE-2026-14371
The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing remote PowerShell commands...
CVE-2026-14371
The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing remote PowerShell commands...
CVE-2026-14371
The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing remote PowerShell commands...
EUVD-2026-44978
The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing remote PowerShell commands...
CVE-2026-14371
The vulnerability CVE-2026-14371 affects Lenovo XClarity Integrator for Windows Admin Center plugin (WAC Gateway) version 5.1.1 and earlier. The issue is a Powershell Command Injection when establishing remote PowerShell commands, with a CVSS v4.0 base score of 8.8 (HIGH) and impact across confid...
Windows Admin Center Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network...
PT-2026-60516
The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing remote PowerShell commands...
PT-2026-60597
Name of the Vulnerable Software and Affected Versions Windows Admin Center affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting XSS issue. This allows an unauthorized attacker to perform spoofing over a network...