CVE-2026-26119

—

CVSS 3.1

8.8 high

EPSS

1%p66

Published

Feb 17, 2026 (Feb 17, 2026)

Modified

Jun 17, 2026

Description

Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network.

Vendors: microsoft
Products: windows admin center
Weakness: CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news4 stories

⚡ Weekly Recap: Double-Tap Skimmers, PromptSpy AI, 30Tbps DDoS, Docker Malware & More

The Hacker NewsFeb 26, 11:25 UTC · Feb 26, 2026Malware CVE-2026-22769 CVE-2026-25926 CVE-2026-26119+32 CVEs

60

Week in review: Firmware-level Android backdoor found on tablets, Dell zero-day exploited since 2024

Help Net SecurityFeb 22, 00:00 UTC · Feb 22, 2026Exploit / PoC in the wildCVE-2026-2441 CVE-2026-22769 CVE-2026-2329+1 CVEs

60

Microsoft Patches CVE-2026-26119 Privilege Escalation in Windows Admin Center

The Hacker NewsFeb 19, 17:40 UTC · Feb 19, 2026Vulnerability in the wildCVE-2026-26119

60

Microsoft reveals critical Windows Admin Center vulnerability (CVE-2026-26119)

Help Net SecurityFeb 19, 00:00 UTC · Feb 19, 2026Vulnerability CVE-2026-26119

60