cve 2026 56197

The cve 2026 56197 tag covers Microsoft’s security update for a high-severity remote code execution vulnerability in Windows Admin Center. The flaw affects Windows Admin Center versions from 1809.0 through 2.7.3 and is described as command injection caused by improper neutralization of special command elements. An authorized attacker could potentially execute code across the network, making systems with the browser-based Windows Server management gateway important to review, especially when broadly reachable by administrators or support staff. Microsoft’s July 14 release resolves the issue in Windows Admin Center 2.7.4, and this archive tracks guidance related to understanding the vulnerability and prioritizing the upgrade.