ExploitPublished
Microsoft MMC MSC EvilTwin · Local Admin Creation
Source Exploit-DB RSS Feed
0
Severity
MediumRated by Threat Radar
Data as of 22 Apr 2026, 07:07 UTC
What to do
AI-suggested
Until official fixes are available, restrict local access to trusted users only and monitor for unauthorized creation of local administrator accounts.
Description
Microsoft MMC MSC EvilTwin - Local Admin Creation
Indicators of compromise
Exploit source code
#!/usr/bin/env python3
# Exploit Title: Microsoft MMC MSC EvilTwin - Local Admin Creation
# Date: 2025-11-22
# Author: Mohammed Idrees Banyamer
# Author Country: Jordan
# GitHub: https://github.com/mbanyamer
# Vendor Homepage: https://www.microsoft.com
# Software Link: N/A (built-in Windows component - mmc.exe)
# Version: Windows 10 all editions, Windows 11 all editions, Windows Server 2016-2025
# Tested on: Windows 11 24H2 (unpatched), Windows 10 22H2 (unpatched)
# CVE: CVE-2025-26633
# CVSS: …References
Community reviews
Loading reviews…