CVE-2026-58643 - Windows Admin Center Spoofing Vulnerability

Back Back to CVE browser

MEDIUM

Windows Admin Center Spoofing Vulnerability

Published Jul 16, 2026

6.1

MEDIUM

CVSS 3.1

EPSS 0.41%

Description

Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.

Affected products

Vendor Microsoft Product Windows Admin Center Default
n/a
- Version
  1809.0
  Status
  affected
  Constraints
  <2.6.7

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Windows Admin Center

n/a

Version	Status	Constraints
1809.0	affected	<2.6.7

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58643
vendor-advisorypatchVendor Advisory

Link	Providers	Tags
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58643		vendor-advisorypatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Jul 16, 2026

Updated Sep 25, 2026

Reserved Jul 1, 2026

Link CVE-2026-58643

CISA Vulnrichment

Updated Jul 18, 2026

NVD

Status Analyzed

Modified Aug 14, 2026

Link CVE-2026-58643

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-58643