Lucene search
+L

275 matches found

CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•41 views

Microsoft Windows Admin Center security vulnerabilities

Microsoft Windows Admin Center is a browser-based, locally deployed application developed by Microsoft. This tool is primarily used for managing servers and clusters. There are security vulnerabilities in Microsoft Windows Admin Center. Attackers can exploit these vulnerabilities to gain higher...

8.3CVSS7.8AI score0.00558EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•28 views

Microsoft Windows Admin Center Access Control Vulnerability

Microsoft Windows Admin Center is a browser-based, locally deployed application developed by Microsoft. This tool is primarily used for managing servers and clusters. Microsoft Windows Admin Center has a vulnerability related to access control. Attackers can exploit this vulnerability to gain...

8.8CVSS7.8AI score0.00427EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/12 12:00 a.m.•2 views

CVE-2026-41086: Improper Access Control

Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network...

8.8CVSS7.8AI score0.00427EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/12 12:00 a.m.•31 views

PT-2026-40189

Name of the Vulnerable Software and Affected Versions Windows Admin Center affected versions not specified Description Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network. This issue can be triggered by abusing the update path,...

8.7CVSS5.8AI score0.00558EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/12 12:00 a.m.•11 views

CVE-2026-35438: Missing Authorization

Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network...

8.3CVSS7.7AI score0.00558EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/04/17 12:00 a.m.•16 views

Security Updates for Microsoft Windows Admin Center in Azure Portal (March 2026)

The Microsoft Windows Admin Center in Azure Portal installed on the remote host is missing a security update. It is, therefore, affected by a vulnerability: - Elevation of Privilege vulnerability in Windows Admin Center in Azure Portal CVE-2026-23660 Note that Nessus has not tested for this issue...

7.8CVSS7.2AI score0.00321EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/04/17 12:00 a.m.•12 views

Microsoft Windows Admin Center (April 2026)

The Microsoft Windows Admin Center in Azure installed on the remote host is missing a security update. It is, therefore, affected by a vulnerability: - Spoofing vulnerability in Windows Admin Center CVE-2026-32196 Note that Nessus has not tested for this issue but has instead relied only on the...

6.1CVSS6.5AI score0.00293EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/04/16 12:00 a.m.•26 views

Windows Admin Center Spear Phishing

The vulnerability of the Windows Admin Center management tool is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

6.4CVSS6.9AI score0.00293EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
•added 2026/04/15 7:24 p.m.•16 views

CVE-2026-32196

Improper neutralization of input during web page generation 'cross-site scripting' in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network...

6.1CVSS6.5AI score0.00293EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/14 6:30 p.m.•22 views

EUVD-2026-22577

Improper neutralization of input during web page generation 'cross-site scripting' in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network...

6.1CVSS5.8AI score0.00293EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/14 6:17 p.m.•20 views

CVE-2026-32196

Improper neutralization of input during web page generation 'cross-site scripting' in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network...

6.1CVSS0.00293EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/14 4:58 p.m.•11 views

CVE-2026-32196 Windows Admin Center Spoofing Vulnerability

...

6.1CVSS6.5AI score0.00293EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/04/14 4:58 p.m.•52 views

CVE-2026-32196 Windows Admin Center Spoofing Vulnerability

...

6.1CVSS0.00293EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/14 4:58 p.m.•10 views

CVE-2026-32196

Improper neutralization of input during web page generation 'cross-site scripting' in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network...

6.1CVSS6.5AI score0.00293EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2026/04/14 4:58 p.m.•64 views

CVE-2026-32196

CVE-2026-32196 is a Windows Admin Center spoofing vulnerability. The CVSSv3.1 base score is 6.1 (Medium) with network as the attack vector, low attack complexity, no privileges required, and user interaction needed. The scope is changed, with low impacts to confidentiality and integrity and no im...

6.1CVSS6.5AI score0.00293EPSS
SaveExploits0References1Affected Software1
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:00 p.m.•26 views

Windows Admin Center Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network...

6.1CVSS6.5AI score0.00293EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•32 views

PT-2026-32848

Name of the Vulnerable Software and Affected Versions Windows Admin Center affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting XSS, which is a flaw where malicious scripts are injected into trusted websites. An...

6.4CVSS5.6AI score0.00293EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/04/14 12:00 a.m.•30 views

Microsoft Windows Admin Center Cross-site Scripting Vulnerability

Microsoft Windows Admin Center is a browser-based, locally deployed application developed by Microsoft. This tool is primarily used for managing servers and clusters. Microsoft Windows Admin Center has a cross-site scripting vulnerability. Attackers can exploit this vulnerability to carry out...

6.1CVSS6.2AI score0.00293EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•4 views

CVE-2026-32196: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network...

6.1CVSS6.5AI score0.00293EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/03/26 3:03 p.m.•14 views

CVE-2026-23660

Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally...

7.8CVSS7.3AI score0.00321EPSS
SaveExploits0References1
Rows per page
Query Builder