CVE-2026-56169 is a Windows Admin Center Elevation of Privilege vulnerability caused by improper authentication. It has a CVSS v3.1 base score of 8.1 and temporal score of 7.1, with a network attack vector, low attack complexity, low privileges required, and no user interaction. Microsoft reports no public disclosure and no known exploitation, with exploit code maturity marked UNPROVEN. The issue affects enterprise risk where Windows Admin Center is reachable over the network, since successful exploitation could let an attacker elevate privileges.

Highlights:
- CVSS scores: Base 8.1 - Temporal 7.1
- Exploit status & code maturity: Publicly Disclosed: No; Exploited: No; Exploit Code Maturity: UNPROVEN
- Impact: Elevation of Privilege; confidentiality HIGH, integrity HIGH, availability NONE
- Exploitation likelihood: Exploitation Less Likely; network vector with LOW attack complexity, LOW privileges required, and NO user interaction
- Severity for enterprise: High. Network-reachable management software increases practical risk, especially where Windows Admin Center is exposed to broader internal or external access
- Patch status: available; customer action required

Affected systems:
- Not listed in the source data