CVE-2026-58631Patch(microsoft / windows_admin_center)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch microsoft windows_admin_center systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-285

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • windows_admin_center

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-07-14); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
Products
windows_admin_center

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-07-14: 2Mentions · 2026-07-15: 1Patch / Workaround · 2026-07-14: 1Patch / Workaround · 2026-07-15: 107-1407-15
Signal classification2 categories
Patch
266.7%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-07-142
General1Patch1
2026-07-151
Patch1
Full discourse3 posts
  • HawkTrace@hawktrace
    Patch

    🚨Windows Admin Center Remote Code Execution🚨 CVE-2026-56196 CVE-2026-58631 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56196 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58631 https://t.co/wva5ZMN8ec

    Post summary

    The post references two Windows Admin Center RCE CVEs and directs readers to Microsoft’s advisory pages that presumably contain patch information.

    177030719521.5K
    560 followersView on X
  • Ed Targett@editortargett
    General

    @int20z got a Q or two about CVE-2026-58631. Pop a DM?

    Post summary

    The tweet simply acknowledges that questions about CVE-2026-58631 have arisen and invites followers to DM for more information, providing no technical or exploit details.

    10010122
    1.8K followersView on X
  • Windows Forum@windowsforum
    Patch

    🛡️ Windows Admin Center below 2.7.4 can let an authenticated attacker run code on the gateway. The monthly Windows update won’t save you—admins must patch the admin tool too. https://windowsforum.com/threads/cve-2026-58631-update-windows-admin-center-to-2-7-4.438301/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #RemoteCodeExecution #WindowsAdminCenter #MicrosoftSecurityUpdates #Cve202658631 https://t.co/uKZZiKm3Pw

    Post summary

    The tweet alerts that Windows Admin Center versions below 2.7.4 allow authenticated remote code execution and recommends patching the tool despite regular Windows updates.

    0000039
    1.2K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appmicrosoftwindows_admin_center---

Explore more