Elevation of Privilege Vulnerability in Azure Portal's Windows Admin Center by Microsoft
CVE-2026-23660

7.8HIGH

Key Information:

Vendor

Microsoft
Status
Windows Admin Center In Azure Portal
Vendor
CVE Published:
10 March 2026

What is CVE-2026-23660?

The Azure Portal's Windows Admin Center has a vulnerability that permits an attacker, who has valid credentials, to escalate their access privileges locally. This issue stems from improper access control mechanisms, posing a significant risk to system integrity and data security. Organizations using this product should implement the latest security updates and monitor their environments for any suspicious activity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Windows Admin Center in Azure Portal 1.0 < 2.6.4

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.