CVE-2026-35438 is a vulnerability classified as CWE-862 (Missing Authorization) affecting Microsoft Windows Admin Center version 1809.0. The vulnerability permits an authorized attacker to elevate privileges remotely over a network connection. The CVSS 3.1 base score is 8.3, reflecting high severity with network attack vector, low attack complexity, and no user interaction required. The impact includes low confidentiality, high integrity, and high availability impacts. Microsoft has released an official fix for this vulnerability as documented in their security update guide.

An attacker with some authorization can exploit this vulnerability remotely to gain elevated privileges, potentially allowing unauthorized actions that compromise system integrity and availability. Confidentiality impact is rated low, but integrity and availability impacts are high, indicating serious potential disruption or unauthorized modification of system resources.

Microsoft has released an official patch to remediate this vulnerability. Users and administrators should apply the provided update from the Microsoft security update guide (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35438) to mitigate the risk. Since an official fix exists, applying the patch is the recommended and effective mitigation.