CVE-2026-62873Patch(microsoft / windows_admin_center)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch microsoft windows_admin_center systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.

microsoft CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62873

Weakness type (CWE)

CWE-347

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

windows_admin_center

Threat summary

Patch or workaround signal is available
5 mentions across 5 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 3 signals
Technical details provided in 4 signals
Disclosure: 2 classified signals
Peaked 4d ago at 1 mentions (2026-08-06); latest day: 1
5 total mentions across 5 days

Affected systems

Vendors

microsoft

Products

windows_admin_center

1 version affected across 1 product

Deep dive

Activity timeline5 mentions / 5d

Signal classification2 categories

Patch

360.0%

Disclosure

240.0%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-08-06	1	Patch1
2026-08-07	1	Disclosure1
2026-08-08	1	Patch1
2026-08-23	1	Patch1
2026-10-13	1	Disclosure1

Full discourse5 posts

Sami Laiho@samilaiho90d
Patch
Microsoft 365 Admin Center Elevation of Privilege Vulnerability URL: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62873 Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8
Post summary
The post references an Office 365 admin center elevation of privilege vulnerability (CVE‑2026‑62873) classified as critical with a CVSS 9.8 score and notes that Microsoft has released an official fix, but no exploit or PoC details are provided.
010211.1K
30.6K followersView on X
CVE@CVEnew91d
Disclosure
CVE-2026-62873 Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network. https://www.cve.org/CVERecord?id=CVE-2026-62873
Post summary
CVE-2026-62873 is a vulnerability in Microsoft 365 Admin Center that incorrectly verifies cryptographic signatures, allowing an unauthorized attacker to elevate privileges over a network.
00001746
57.9K followersView on X
IntegSec@integ_sec24d
Disclosure
CVE-2026-62873: Microsoft 365 Admin Center Privilege Escalation Bug - What It Means for Your Business and How to Respond https://hubs.li/Q04B1hWv0
Post summary
The text is a headline announcing CVE-2026-62873, a Microsoft 365 Admin Center privilege escalation vulnerability, with a link to an article discussing its business impact and response. The limited text (title + link) primarily serves as a vulnerability disclosure with no named exploit, PoC, patch, or active exploitation evidence.
0000029
35 followersView on X
Anavem.com@Anavem_74d
Patch
CVE-2026-62873: Critical Microsoft 365 Admin Center EoP Flaw Patched https://anavem.com/news/cve-2026-62873-critical-microsoft-365-admin-center-eop-flaw-patched
Post summary
The article announces that CVE-2026-62873, a critical elevation-of-privilege flaw in Microsoft 365 Admin Center, has been patched.
00000103
162 followersView on X
Windows Forum@windowsforum91d
Patch
⚠️ CVE-2026-62873 hits the Microsoft 365 Admin Center, but there’s no local patch to deploy—just tighter access controls and monitoring. Cloud security: where “update now” means “wait for Microsoft.” https://windowsforum.com/security-alerts.84/cve-2026-62873-microsoft-365-admin-center-has-no-local-patch.441884/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #ElevationOfPrivilege #EntraIdSecurity https://t.co/baNzY357zI
Post summary
CVE‑2026‑62873 targets the Microsoft 365 Admin Center; Microsoft has not released a local patch, so the advised response is to enforce stricter access controls and monitoring.
0000071
1.3K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	windows_admin_center	-	-	-

Explore more

Back to dashboard microsoft CVEs windows_admin_center vulnerabilities

What researchers are saying

CVE-2026-62873

Sami Laiho[verified]@samilaihoPatch

The post references an Office 365 admin center elevation of privilege vulnerability (CVE‑2026‑62873) classified as critical with a CVSS 9.8 score and notes that Microsoft has released an official fix, but no exploit or PoC details are provided.

IntegSec[verified]@integ_secDisclosure

The text is a headline announcing CVE-2026-62873, a Microsoft 365 Admin Center privilege escalation vulnerability, with a link to an article discussing its business impact and response. The limited text (title + link) primarily serves as a vulnerability disclosure with no named exploit, PoC, patch, or active exploitation evidence.

Anavem.com[verified]@Anavem_Patch

The article announces that CVE-2026-62873, a critical elevation-of-privilege flaw in Microsoft 365 Admin Center, has been patched.

Windows Forum[verified]@windowsforumPatch

CVE‑2026‑62873 targets the Microsoft 365 Admin Center; Microsoft has not released a local patch, so the advised response is to enforce stricter access controls and monitoring.

CVE@CVEnewDisclosure

CVE-2026-62873 is a vulnerability in Microsoft 365 Admin Center that incorrectly verifies cryptographic signatures, allowing an unauthorized attacker to elevate privileges over a network.