AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

MicrosoftCVE-2026-58643

Microsoft Windows Admin Center: cross-site scripting

Microsoft

CVE-2026-58643 · Published Jul 16, 2026 · updated Aug 14, 2026

Medium6.1
Fix: upgrade to 2.6.7 or later
Microsoft advisory

Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.

Affected versions

PackageAffectedFixed in
Windows Admin Center
Product
>= 1809.0, < 2.6.72.6.7
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-79

More Microsoft advisories

All Microsoft
Medium 5.4Jul 17Microsoft Edge (Chromium-based): authentication bypassCVE-2026-57980fixed in 150.0.4078.80High 7.1Jul 17Microsoft Windows RDP: unauthorized attacker could disclose information overCVE-2026-56171fixed in 2.1.65.2 +1High 7.5Jul 16Microsoft Windows Terminal App: integer overflowCVE-2026-59117fixed in 1.24.11321.0Medium 4.6Jul 16Microsoft Office SharePoint: cross-site scriptingCVE-2026-62826fixed in 16.0.5561.1001 +2High 7.0Jul 16Microsoft Windows Backup Engine: race conditionCVE-2026-58598fixed in 10.0.19044.7548 +4HighJul 14Secret exfiltration vulnerabilityCVE-2026-47282fixed in 1.128.1