CVE-2026-56197: Microsoft Windows Admin Center

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network.

Affected products

• Microsoft Windows Admin Center: before 2606 (fixed in 2606)

Published 2026-07-14. Last modified 2026-07-24.