CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network. |
| 14/07/2026 |
| CVE-2026-58631 | HOCH7.8 | Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally. | 14/07/2026 |
| CVE-2026-57107 | HOCH7.8 | Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally. | 14/07/2026 |
| CVE-2026-56185 | MITTEL6.5 | Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network. | 14/07/2026 |
| CVE-2026-56169 | HOCH8.8 | Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network. | 14/07/2026 |
| CVE-2026-42834 | HOCH7.8 | Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network. | 20/05/2026 |
| CVE-2026-41086 | HOCH8.8 | Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network. | 12/05/2026 |
| CVE-2026-35438 | HOCH8.3 | Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network. | 12/05/2026 |
| CVE-2026-32196 | MITTEL6.1 | Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network. | 14/04/2026 |
| CVE-2026-23660 | HOCH7.8 | Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally. | 10/03/2026 |
| CVE-2026-26119 | HOCH8.8 | Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network. | 17/02/2026 |
| CVE-2026-20965 | HOCH7.5 | Improper verification of cryptographic signature in Windows Admin Center allows an authorized attacker to elevate privileges locally. | 13/01/2026 |
| CVE-2025-64669 | HOCH7.8 | Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges locally. | 11/12/2025 |
| CVE-2025-29819 | MITTEL6.2 | External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally. | 08/04/2025 |
| CVE-2023-29347 | MITTEL6.8 | Windows Admin Center Spoofing Vulnerability | 11/07/2023 |
| CVE-2019-0813 | KRITISCH9.8 | An elevation of privilege vulnerability exists when Windows Admin Center improperly impersonates operations in certain situations, aka 'Windows Admin Center Elevation of Privilege Vulnerability'. | 09/04/2019 |