VulnSocial

CVE-2026-56196Disclosure(microsoft / windows_admin_center)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch microsoft windows_admin_center systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network.

microsoft CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Patch / fix
Weakness type (CWE)
CWE-23

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • windows_admin_center

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-07-14); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
microsoft
Products
windows_admin_center

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-07-14: 1Mentions · 2026-07-15: 1Patch / Workaround · 2026-07-15: 1Technical Details · 2026-07-14: 1Technical Details · 2026-07-15: 107-1407-15
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-07-141
Disclosure1
2026-07-151
Patch1
Full discourse2 posts
  • HawkTrace@hawktrace
    Disclosure

    🚨Windows Admin Center Remote Code Execution🚨 CVE-2026-56196 CVE-2026-58631 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56196 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58631 https://t.co/wva5ZMN8ec

    Post summary

    The post announces the existence of two Windows Admin Center remote code execution vulnerabilities (CVE-2026-56196 and CVE-2026-58631) and provides links to Microsoft’s security advisory pages.

    177030719521.5K
    560 followersView on X
  • Windows Forum@windowsforum
    Patch

    🪟 Windows Admin Center’s CVSS 8.8 RCE is authenticated, but that’s hardly comforting when the target manages your servers. Update to 2.7.4 before “admin” becomes “attacker.” https://windowsforum.com/threads/cve-2026-56196-update-windows-admin-center-to-2-7-4.438794/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #MicrosoftSecurity #RemoteCodeExecution #WindowsAdminCenter #Cve202656196 https://t.co/CSMKkRL2qb

    Post summary

    The post highlights an authenticated Remote Code Execution vulnerability (CVE‑2026‑56196) in Windows Admin Center, urging users to update to version 2.7.4 to remediate.

    0000017
    1.2K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appmicrosoftwindows_admin_center---

Explore more

Back to dashboardmicrosoft CVEswindows_admin_center vulnerabilities