Microsoft Patches CVE-2026-26119 Privilege Escalation in Windows Admin Center

Microsoft disclosed and patched a high-severity privilege-escalation vulnerability (CVE-2026-26119, CVSS 8.8) in Windows Admin Center that could let an attacker gain the rights of the user running the application and — under some conditions described by the researcher — lead to full domain compromise; the issue was credited to Semperis researcher Andrea Pierini and fixed in Windows Admin Center version 2511, and Microsoft labeled the flaw 'Exploitation More Likely' though no active exploitation has been reported.