Microsoft Addresses High-Severity Vulnerability in Windows Admin Center

Microsoft has recently patched a critical security vulnerability in its Windows Admin Center, tracked as CVE-2026-26119. This high-severity flaw, which has a CVSS score of 8.8 out of 10, allows an authorized attacker to escalate their privileges over a network due to improper authentication. The vulnerability was disclosed in an advisory released on February 17, 2026, and it affects the locally deployed, browser-based management tool used for managing Windows clients, servers, and clusters.

Microsoft Patches CVE-2026-26119 Privilege Escalation in Windows Admin CenterWindows Admin Center vulnerability allows privilege escalation

The vulnerability was discovered by Andrea Pierini, a researcher from Semperis, who reported that it could enable a full domain compromise starting from a standard user account under specific conditions. While Microsoft has patched the issue in Windows Admin Center version 2511, released in December 2025, the technical details surrounding CVE-2026-26119 remain undisclosed. However, Microsoft has classified the vulnerability with an "Exploitation More Likely" assessment, indicating a heightened risk of potential exploitation.

Windows Admin Center vulnerability allows privilege escalationMicrosoft Patches CVE-2026-26119 Privilege Escalation in Windows Admin Center

In its advisory, Microsoft stated, "Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network." The company has not reported any known exploitation of this vulnerability in the wild but emphasizes the importance of the patch to mitigate risks.

Windows Admin Center vulnerability allows privilege escalation

While the patch addresses the vulnerability, some cybersecurity experts have raised concerns about the lack of transparency regarding the technical details. The undisclosed nature of the vulnerability may hinder organizations from fully understanding the risks and implementing adequate security measures.

Windows Admin Center vulnerability allows privilege escalation

As organizations implement the patch, further scrutiny may arise regarding the security practices surrounding Windows Admin Center. Cybersecurity professionals are likely to monitor for any emerging threats or exploitation attempts related to CVE-2026-26119, especially given its potential for significant impact.

Microsoft Patches CVE-2026-26119 Privilege Escalation in Windows Admin Center

• “Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network,” — Microsoft Advisory

Microsoft Patches CVE-2026-26119 Privilege Escalation in Windows Admin Center

• “allow a full domain compromise starting from a standard user” — Andrea Pierini, Semperis Researcher

Microsoft Patches CVE-2026-26119 Privilege Escalation in Windows Admin Center