Microsoft: Critical Windows Admin Center Flaw Allows Privilege Escalation

A critical authentication flaw (CVE-2026-26119, CVSS 8.8) in Windows Admin Center v2.6.4 can let an authorized low-privilege user elevate privileges across enterprise-managed systems, potentially granting administrative control over multiple servers; Microsoft has not reported active exploitation, and recommended mitigations include patching, enforcing least privilege, enabling MFA, restricting network exposure, and enhanced monitoring.