Security Updates for Microsoft Windows Admin Center in Azure Portal (March 2026)

The Microsoft Windows Admin Center in Azure Portal installed on the remote host is missing a security update. It is, therefore, affected by a vulnerability: - Elevation of Privilege vulnerability in Windows Admin Center in Azure Portal CVE-2026-23660 Note that Nessus has not tested for this issue...

Microsoft Windows Admin Center (April 2026)

The Microsoft Windows Admin Center in Azure installed on the remote host is missing a security update. It is, therefore, affected by a vulnerability: - Spoofing vulnerability in Windows Admin Center CVE-2026-32196 Note that Nessus has not tested for this issue but has instead relied only on the...

CVE-2026-32196

Improper neutralization of input during web page generation 'cross-site scripting' in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network...

EUVD-2026-22577

Improper neutralization of input during web page generation 'cross-site scripting' in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-32196

Improper neutralization of input during web page generation 'cross-site scripting' in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-32196 Windows Admin Center Spoofing Vulnerability

...

CVE-2026-32196

CVE-2026-32196 is a Windows Admin Center spoofing vulnerability. The CVSSv3.1 base score is 6.1 (Medium) with network as the attack vector, low attack complexity, no privileges required, and user interaction needed. The scope is changed, with low impacts to confidentiality and integrity and no im...

CVE-2026-32196

Improper neutralization of input during web page generation 'cross-site scripting' in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-32196 Windows Admin Center Spoofing Vulnerability

...

Windows Admin Center Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network...

PT-2026-32848

Name of the Vulnerable Software and Affected Versions Windows Admin Center affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting XSS, which is a flaw where malicious scripts are injected into trusted websites. An...

Microsoft Windows Admin Center 跨站脚本漏洞

Microsoft Windows Admin Center is a browser-based, locally deployed application developed by Microsoft. This tool is primarily used for managing servers and clusters. Microsoft Windows Admin Center has a cross-site scripting vulnerability. Attackers can exploit this vulnerability to carry out...

CVE-2026-23660

Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally...

Microsoft Windows Admin Center Local Privilege Escalation (February 2026)

The remote Windows host is running a version of Microsoft Windows Admin Center that is missing a security update. It is, therefore, affected by a local privilege escalation vulnerability. Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a...

EUVD-2026-10582

Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally...

EUVD-2026-10581

Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally...

CVE-2026-23660

Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally...

CVE-2026-23660 Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability

...

CVE-2026-23660 Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability

...

CVE-2026-23660

CVE-2026-23660 concerns Windows Admin Center in the Azure Portal with an Elevation of Privilege vulnerability. Attack vector is local, requiring LOW privileges with no user interaction, and the impact is HIGH on confidentiality, integrity, and availability. The base score is 7.8 (CVSS 3.1). The e...