CVE-2026-56197

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-56197
Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56197 Patch Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:microsoft:windows_admin_center:*:*:*:*:*:*:*:*
History

24 Oct 2026, 21:10

Type Values Removed Values Added
Summary
  • (es) Neutralización incorrecta de elementos especiales utilizados en un comando (’inyección de comandos’) en Windows Admin Center permite a un atacante autorizado ejecutar código a través de una red.
Information

Published : 2026-07-14 18:18

Updated : 2026-10-24 21:10

NVD link : CVE-2026-56197

Mitre link : CVE-2026-56197

CVE.ORG link : CVE-2026-56197

JSON object : View

Products Affected

microsoft

  • windows_admin_center
CWE
CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')