high8.8
CVE-2026-56197
Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over …
Impact
Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows Admin Center | before 2606 |
| Microsoft | Windows Admin Center | from 1809.0 before 2.7.4 |