Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
30 results
Oct 6, 2026Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS CVE-2026-101207 · Other software · Dell · reported by security_alert@emc.comHigh 8.8
Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
- Product
- OpenManage Integration
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 6, 2026Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.CVE-2026-62873 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comCritical 9.8
Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.
- Product
- Microsoft 365 Admin Center
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 16, 2026Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofingCVE-2026-58643 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.1
Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.
- Product
- Windows Admin Center
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 16, 2026The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection CVE-2026-14371 · Other software · Lenovo · reported by psirt@lenovo.comHigh 8.8
The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing remote PowerShell commands.
- Product
- XClarity Integrator for Microsoft Windows Admin Center
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 14, 2026Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over aCVE-2026-56197 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network.
- Product
- Windows Admin Center
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 14, 2026Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network.CVE-2026-56196 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network.
- Product
- Windows Admin Center
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 14, 2026Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally.CVE-2026-58631 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally.
- Product
- Windows Admin Center
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 14, 2026Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally.CVE-2026-57107 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally.
- Product
- Windows Admin Center
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 14, 2026Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network.CVE-2026-56185 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.5
Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network.
- Product
- Windows Admin Center
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 14, 2026Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network.CVE-2026-56169 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.1
Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
- Product
- Windows Admin Center
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 16, 2026Dell OpenManage Integration with Microsoft Windows Admin Center contains a Remote Code Execution vulnerability in the gateway plugin.CVE-2024-24909 · Other software · Dell · reported by security_alert@emc.comHigh 8.8
Dell OpenManage Integration with Microsoft Windows Admin Center contains a Remote Code Execution vulnerability in the gateway plugin. A remote authenticated user could potentially exploit this vulnerability to escalate privileges. The malicious user may gain the ability to run arbitrary code remotely. This is a high severity vulnerability so Dell recommends customers to upgrade at the earliest opportunity.
- Product
- OpenManage
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 20, 2026Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.CVE-2026-42834 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
- Product
- Windows Admin Center in Azure Portal
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 12, 2026Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.CVE-2026-41086 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
- Product
- Windows Admin Center in Azure Portal
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 12, 2026Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network.CVE-2026-35438 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.3
Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
- Product
- Windows Admin Center
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 14, 2026Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofingCVE-2026-32196 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.1
Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.
- Product
- Windows Admin Center
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 10, 2026Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally.CVE-2026-23660 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally.
- Product
- Windows Admin Center in Azure Portal
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 17, 2026Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network.CVE-2026-26119 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
- Product
- Windows Admin Center
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 13, 2026Improper verification of cryptographic signature in Windows Admin Center allows an authorized attacker to elevate privileges locally.CVE-2026-20965 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5
Improper verification of cryptographic signature in Windows Admin Center allows an authorized attacker to elevate privileges locally.
- Product
- Windows Admin Center in Azure Portal
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 16, 2025In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes.CVE-2025-14432 · Other software · HP Inc · reported by hp-security-alert@hp.comHigh 8.1
In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration changes made using the provisioning server or the device WebUI.
- Product
- Poly G7500
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 11, 2025Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges locally.CVE-2025-64669 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges locally.
- Product
- Windows Admin Center
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 8, 2025External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally.CVE-2025-29819 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.2
External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally.
- Product
- Windows Admin Center
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 10, 2024Microsoft Windows Admin Center Information Disclosure VulnerabilityCVE-2024-43475 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.3
Microsoft Windows Admin Center Information Disclosure Vulnerability
- Product
- Windows Server 2008 Service Pack 2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2024Insufficient access checks in Visual Planning Admin Center 8 before v.1 Build 240207 allow attackers in possession of a non-administrative Visual Planning accouCVE-2023-49233 · Other software · visual_planning · reported by MITREHigh 8.8
Insufficient access checks in Visual Planning Admin Center 8 before v.1 Build 240207 allow attackers in possession of a non-administrative Visual Planning account to utilize functions normally reserved for administrators. The affected functions allow attackers to obtain different types of configured credentials and potentially elevate their privileges to administrator level.
- Product
- admin_center
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordschutzwerk.comvisual-planning.com
Jul 11, 2023Windows Admin Center Spoofing VulnerabilityCVE-2023-29347 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.7
Windows Admin Center Spoofing Vulnerability
- Product
- Windows Admin Center
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Mar 11, 2021Windows Admin Center Security Feature Bypass VulnerabilityCVE-2021-27066 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 4.3
Windows Admin Center Security Feature Bypass Vulnerability
- Product
- Windows Admin Center
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jul 30, 2019IBM WebSphere Application Server - Liberty Admin Center could allow a remote attacker to hijack the clicking action of the victim.CVE-2019-4285 · Other software · IBM · reported by psirt@us.ibm.comMedium 5.4
IBM WebSphere Application Server - Liberty Admin Center could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could send a specially-crafted HTTP request to hijack the victim's click actions or launch other client-side browser attacks. IBM X-Force ID: 160513.
- Product
- WebSphere Application Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comibm.com
Apr 9, 2019An elevation of privilege vulnerability exists when Windows Admin Center improperly impersonates operations in certain situations, aka 'Windows Admin Center EleCVE-2019-0813 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comCritical 9.8
An elevation of privilege vulnerability exists when Windows Admin Center improperly impersonates operations in certain situations, aka 'Windows Admin Center Elevation of Privilege Vulnerability'.
- Product
- Windows Admin Center
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Jul 7, 2016Admin Center in IBM WebSphere Application Server (WAS) 8.5.5.2 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote attackers to obtain sensitCVE-2016-0389 · Other software · IBM · reported by psirt@us.ibm.comMedium 5.3
Admin Center in IBM WebSphere Application Server (WAS) 8.5.5.2 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote attackers to obtain sensitive information via unspecified vectors.
- Product
- Websphere Application Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordwww-01.ibm.comwww-01.ibm.com
Aug 7, 2014Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager (TSM) in Rocket ServerGraph 1.2 allows remote attackers to (1) create arbitraryCVE-2014-3914 · Other software · Rocketsoftware · reported by MITREHigh 10
Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager (TSM) in Rocket ServerGraph 1.2 allows remote attackers to (1) create arbitrary files via a .. (dot dot) in the query parameter in a writeDataFile action to the fileRequestor servlet, execute arbitrary files via a .. (dot dot) in the query parameter in a (2) run or (3) runClear action to the fileRequestor servlet, (4) read arbitrary files via a readDataFile action to the fileRequestor servlet, (5) execute arbitrary code via a save_server_groups action to the userRequest servlet, or (6) delete arbitrary files via a del action in the fileRequestServlet servlet.
- Product
- Rocket Servergraph
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexploit-db.comzerodayinitiative.com
Jun 11, 2014The userRequest servlet in the Admin Center for Tivoli Storage Manager in Rocket Servergraph allows remote attackers to execute arbitrary commands via a (1) autCVE-2014-3915 · Other software · Rocketsoftware · reported by MITREHigh 10
The userRequest servlet in the Admin Center for Tivoli Storage Manager in Rocket Servergraph allows remote attackers to execute arbitrary commands via a (1) auth, (2) auth_session, (3) auth_simple, (4) add, (5) add_flat, (6) remove, (7) set_pwd, (8) add_permissions, (9) revoke_permissions, (10) runAsync, or (11) tsmRequest command.
- Product
- Rocket Servergraph
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comzerodayinitiative.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.