← back | CVE Intelligence

CVE-2026-26119 [High]

Curated 2 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-26119.

Vendor: Microsoft
Product: Windows Admin Center
Affected versions: < 2.6.4
CVSS: 8.8
Coverage Span: 2026-03-23 → 2026-08-09
Reports: 2 related reports

Associated Reports & Timeline

CVE-2026-26119 PoC: Windows Admin Center authenticated RCE

A PoC for CVE-2026-26119, an authenticated remote code execution vulnerability in Windows Admin Center, exploiting the WinREST/PowerShell invokeCommand path with steps to obtain a reverse shell.

Why it matters: The PoC shows that a low-privileged valid account can turn the flaw into remote command execution over the network. Upgrade to Windows Admin Center 2.6.4 or later and review WAC accounts and anomalous PowerShell activity.

What You Need to Know: Windows Admin Center Remote Privilege Escalation (CVE-2026-26119)

The researcher behind CVE-2026-26119 explains the Windows Admin Center remote privilege escalation: how authentication reflection enabled code execution and what the fix teaches about this bug class.