VulnSocial

CVE-2026-58643General(microsoft / windows_admin_center)

LOWCVSS 6.1 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch microsoft windows_admin_center systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.

microsoft CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Patch / fix
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • windows_admin_center

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 1 signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-07-16); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
microsoft
Products
windows_admin_center

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-07-16: 1Mentions · 2026-07-17: 1Patch / Workaround · 2026-07-16: 1Patch / Workaround · 2026-07-17: 1Technical Details · 2026-07-17: 107-1607-17
Signal classification2 categories
General
150.0%
Patch
150.0%
Referenced assets1 URL
Classification over time
DateTotalLabels
2026-07-161
General1
2026-07-171
Patch1
Full discourse2 posts
  • The Dustin Childs@dustin_childs
    Patch

    As if Tuesday wasn't enough, #Microsoft released 4 patches yesterday: CVE-2026-56171: RDP Information Disclosure Vulnerability CVE-2026-58598: Backup Service EoP Vulnerability CVE-2026-58643: Admin Center Spoofing Vulnerability CVE-2026-59117: Windows Terminal RCE Vulnerability

    Post summary

    Microsoft released patches for four CVEs—CVE-2026-56171 (RDP information disclosure), CVE-2026-58598 (Backup Service EoP), CVE-2026-58643 (Admin Center spoofing), and CVE-2026-59117 (Windows Terminal RCE)—addressing critical vulnerabilities across Windows components.

    001961.3K
    2.4K followersView on X
  • Windows Forum@windowsforum
    General

    🪟 Windows Admin Center spoofing flaw, CVE-2026-58643, comes with almost no technical details—because apparently admins enjoy mystery patches. Validate updates, review exposure, and don’t wait for an exploit PoC. https://windowsforum.com/threads/cve-2026-58643-secure-windows-admin-center-spoofing-flaw.438986/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #MicrosoftSecurity #VulnerabilityManagement https://t.co/MWOu6h6ZvV

    Post summary

    The post announces a Windows Admin Center spoofing flaw but offers no technical details or evidence of active exploitation, merely urging update validation.

    0000059
    1.3K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appmicrosoftwindows_admin_center---

Explore more

Back to dashboardmicrosoft CVEswindows_admin_center vulnerabilities