WID-SEC-W-2026-2392

DeutschShown in its original language — a full translation is planned for a future version.

Microsoft Windows Admin Center: Schwachstelle ermöglicht Cross-Site Scripting

view advisory published 2026-07-16

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Microsoft Windows Admin Center ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-58643US	—	0.41% (35th)	—	2026-07-16
Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.

references

External citations — patches, advisories, analysis.

Microsoft Security Advisory CVE-2026-58643 vom 2026-07-16external
WID-SEC-W-2026-2392 - CSAF Versionself
WID-SEC-2026-2392 - Portal Versionself

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan