91041 matches found
CVE-2026-56196
CVE-2026-56196 affects Windows Admin Center (WAC). It describes a relative path traversal vulnerability that allows an attacker with network access to execute code on the target system. The NVD entry lists CVSS v3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H with base score 8.8 (HIGH). Connected source...
EUVD-2026-44251
Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network...
CVE-2026-56196 Windows Admin Center (WAC) Remote Code Execution Vulnerability
...
CVE-2026-58631 Windows Admin Center (WAC) Remote Code Execution Vulnerability
...
CVE-2026-58631 Windows Admin Center (WAC) Remote Code Execution Vulnerability
...
CVE-2026-58631
CVE-2026-58631 involves Windows Admin Center where improper authorization allows an authorized attacker to execute code locally. The available sources describe a local attack vector with high impact (C:H/I:H/A:H) and a CVSS v3.1 base score of 7.8, indicating remote code execution risk within the ...
CVE-2026-57107
Summary: CVE-2026-57107 is an elevation-of-privilege flaw due to improper authentication in Windows Admin Center. An authorized local attacker can escalate privileges. The CVSS v3.1 base score is 7.8 (HIGH), with local attack vector, low complexity, and high impacts on confidentiality, integrity,...
CVE-2026-57107 Windows Admin Center Elevation of Privilege Vulnerability
...
CVE-2026-57107 Windows Admin Center Elevation of Privilege Vulnerability
...
CVE-2026-56185 Windows Admin Center Information Disclosure Vulnerability
...
CVE-2026-56185 Windows Admin Center Information Disclosure Vulnerability
...
CVE-2026-56185
CVE-2026-56185 describes an information-disclosure issue in Windows Admin Center caused by improper authentication. The documented impact is that an authorized attacker can disclose information over a network, with a CVSS 3.1 base score of 6.5 (Network attack vector, Low attack complexity, Low pr...
CVE-2026-56185
Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network...
CVE-2026-56169 Windows Admin Center Elevation of Privilege Vulnerability
...
CVE-2026-56169 Windows Admin Center Elevation of Privilege Vulnerability
...
CVE-2026-56169
CVE-2026-56169 concerns improper authentication in Windows Admin Center that can allow an attacker authenticated on the network to elevate privileges. The CVSS 3.1 base score is 8.1 (High), with network as the attack vector, low attack complexity, and low privileges required; confidentiality and ...
CVE-2026-15429
CVE-2026-15429 affects the Archer VX1800v v1 HTTP authentication component. Improper handling of user-controlled input may allow newline characters to be injected into internally constructed configuration data. An authenticated user with sufficient privileges can modify account settings and achie...
CVE-2026-15703 SourceCodester Simple and Nice Shopping Cart Script userproductdeletequery.php sql injection
A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. This vulnerability affects unknown code of the file /admin/userproductdeletequery.php. Performing a manipulation of the argument userid results in sql injection. It is possible to initiate the attack remotely...
CVE-2026-52838
Easy!Appointments is a self hosted appointment scheduler. Versions prior to 1.6.0 allow administrators to define a custom "booking disabled" message through the booking settings page. That value is stored in the disablebookingmessage setting via a rich-text editor and later passed directly to the...
