Windows Admin Center (WAC) Remote Code Execution Vulnerability

Summary

Details

Vulnerabilities 1

• High 7.8
  CVE-2026-58631

  Windows Admin Center (WAC) Remote Code Execution Vulnerability

  Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally.

  Microsoft Windows Admin Center Windows
  Jul 14, 2026

Revision history

1. 2026-07-14 #1

   Information published.

References

• CVE-2026-58631 Windows Admin Center (WAC) Remote Code Execution Vulnerability - HTML
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58631
• Microsoft Exploitability Index
  https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
• Microsoft Support Lifecycle
  https://support.microsoft.com/lifecycle
• Common Vulnerability Scoring System
  https://www.first.org/cvss