CVE-2026-58631

Think of Windows Admin Center like a secure “control panel” for managing servers. This bug is a weakness in who is allowed to do powerful actions—someone with limited permissions can potentially trick it into running code of their choice. If that happens, it can turn a limited foothold into a full compromise of that server.

This matters if you use or host Windows Admin Center on a server where an attacker might be able to get low-level permissions (for example, through another account compromise). The risk is primarily local, meaning the attacker needs low-level access on the target system. It’s not a “no access needed” issue—reachability depends on whether an attacker can get that initial low-privilege foothold.

This is RED because it enables local arbitrary code execution after an attacker obtains low-privilege access, which can quickly escalate to full control. Even without confirmed public exploitation reports in the provided materials, the impact is high and the fix is available. Act immediately to remove the vulnerable version from your environment.