High · 8.8 CVE-2026-56196 EUVD-2026-44251GHSA-pcv7-rjc4-q59m

Windows Admin Center (WAC) Remote Code Execution Vulnerability

Published Jul 14, 2026 · Updated Nov 10, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Windows Admin Center Platform: Windows

Description

Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network.

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Windows Admin Center	1809.0 – < 2.7.4	2.7.4

Advisories 3

WID-SEC-2026-2316 Microsoft Windows Produkte: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 6, 2026
NCSC-2026-0231 Kwetsbaarheden verholpen in Microsoft Windows NCSC-NL (Netherlands) · Jul 14, 2026
MSRC-CVE-2026-56196 Windows Admin Center (WAC) Remote Code Execution Vulnerability Microsoft Security Response Center · Jul 14, 2026

References

Windows Admin Center (WAC) Remote Code Execution Vulnerability vendor-advisory patch