NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2026-26119

CVSS 3.1: 8.8 high
EPSS: 1%p66
Published: Feb 17, 2026 · Feb 17, 2026
Modified: Jun 17, 2026

Analyze CVE-2026-26119 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network.

Vendors: microsoft

Products: windows admin center

Weakness: CWE-287

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news

4 stories

⚡ Weekly Recap: Double-Tap Skimmers, PromptSpy AI, 30Tbps DDoS, Docker Malware & More

The Hacker NewsFeb 26, 11:25 UTC · Feb 26, 2026MalwareCVE-2026-22769 CVE-2026-25926 CVE-2026-26119+323

60

Week in review: Firmware-level Android backdoor found on tablets, Dell zero-day exploited since 2024

Help Net SecurityFeb 22, 00:00 UTC · Feb 22, 2026Exploit / PoCExploitedCVE-2026-2441 CVE-2026-22769 CVE-2026-2329+12 · 1 read

60

Microsoft Patches CVE-2026-26119 Privilege Escalation in Windows Admin Center

The Hacker NewsFeb 19, 17:40 UTC · Feb 19, 2026VulnerabilityExploitedCVE-2026-261193

60

Microsoft reveals critical Windows Admin Center vulnerability (CVE-2026-26119)

Help Net SecurityFeb 19, 00:00 UTC · Feb 19, 2026VulnerabilityCVE-2026-261193 · 1 read

60