CVE-2026-58631 is an improper authorization vulnerability (CWE-285) in Microsoft Windows Admin Center version 1809.0. It enables an attacker with some level of authorization (low privileges) to execute code locally, potentially leading to full compromise of confidentiality, integrity, and availability of the system. The CVSS 3.1 base score is 7.8, reflecting high impact with local attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability. Microsoft has released an official fix for this vulnerability as documented in their security update guide.

An attacker with limited privileges on Windows Admin Center 1809.0 can exploit this improper authorization vulnerability to execute arbitrary code locally. This can result in complete compromise of the affected system's confidentiality, integrity, and availability. There are no known exploits in the wild at the time of publication.

An official fix is available from Microsoft for Windows Admin Center version 1809.0. Users and administrators should apply the security update provided by Microsoft as detailed in the vendor advisory (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58631) to remediate this vulnerability.