Windows Admin Center Privilege Escalation Bug Fixed (CVE-2026-26119)

IT Consultancy

IT Consultancy Get expert guidance to leverage technology for your business growth. We help you identify the right IT solutions, optimize infrastructure, and ensure your digital environment is secure,…

Digital Marketing

Digital Marketing Grow your brand and reach the right audience with data-driven marketing strategies. We help you create campaigns that convert, manage social channels effectively, and optimize your d…

Privacy Policy

Privacy Policy At CometSoul, accessible from https://cometsoul.com, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collec…

Terms and Conditions

Welcome to CometSoul! These terms and conditions outline the rules and regulations for the use of CometSoul’s Website, located at https://cometsoul.com. By accessing this website we assume you a…

Disclaimer

If you require any more information or have any questions about our site’s disclaimer, please feel free to contact us. Disclaimers for CometSoul All the information on this website – https…

Post

Tutorial

Wifi Managed Service

Managed Wi-Fi Service

Managed Wi-Fi Service Build a fast, stable, and secure Wi-Fi for your business at Zero depreciation cost. Enterprise-Grade Guest Wi-Fi With $0 Upfront Hardware Costs. We provide, install, and support …

System Integrator

Smart Business System Integrator

Smart Business System Integrator Simplify your daily operations with smart systems that automate bookings, schedules, and routine tasks so you can focus on growing your business. We set up and integra…

Microsoft has patched a high-severity vulnerability in Windows Admin Center that could allow attackers to escalate privileges over the network. The flaw, tracked as CVE-2026-26119, carries a CVSS score of 8.8 and affects environments running vulnerable versions of the management platform.

Windows Admin Center is widely used as a browser-based tool to manage Windows clients, servers, and clusters without relying on cloud connectivity. According to Microsoft, the issue stems from improper authentication, which could enable an authorized attacker to gain the same privileges as the user running the application.

The vulnerability was reported by Semperis researcher Andrea Pierini and patched in Windows Admin Center version 2511 (December 2025). Although there is currently no confirmed in-the-wild exploitation, Microsoft has flagged the bug as “Exploitation More Likely,” meaning organizations should treat it with urgency.

Security experts warn that, under certain conditions, the flaw could potentially lead to full domain compromise starting from a standard user account. Because of this risk, administrators are strongly advised to update immediately and review access controls around Windows Admin Center deployments.

Source: https://thehackernews.com/2026/02/microsoft-patches-cve-2026-26119.html