VDB

CVE-2026-32196

CVE-2026-32196 PUBLISHED CVSS 6.099999904632568 MEDIUM

Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.

EPSS 0.05% · 16.9th percentile

Risk Scores

CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C
EPSS Score
0.05%
16.9th percentile

Affected Products

VendorProductVersions
MicrosoftWindows Admin Center1809.0
microsoftwindows_admin_center1809.0

Timeline

  • Apr 14, 2026 CVE Published
  • Apr 14, 2026 PoC Published
  • Apr 15, 2026 Security Advisory
  • Apr 15, 2026 Security Advisory
  • Apr 17, 2026 Security Advisory
  • Apr 17, 2026 Security Advisory
  • Apr 17, 2026 Security Advisory
  • Apr 17, 2026 Security Advisory
  • Apr 17, 2026 Security Advisory
  • Apr 17, 2026 Security Advisory
  • Apr 17, 2026 Security Advisory
  • Apr 17, 2026 Security Advisory

References

…and 114 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›