Critical Vulnerabilities in Windows Admin Center and BeyondTrust Exposed

Gbhackers

Critical Vulnerabilities in Windows Admin Center and BeyondTrust Exposed

First seen 18 Feb 2026, 07:07 UTC • •64.9

Article Content

1 / 3

Browse articles

ThreatCluster •March 12, 2026 at 16:10 UTC

A critical flaw in Windows Admin Center has been identified, allowing attackers to escalate privileges on affected systems. Simultaneously, a separate vulnerability in BeyondTrust has been exploited, enabling attackers to gain full control over Active Directory. Both vulnerabilities pose significant risks to organizations relying on these platforms.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 202d ago How this analysis works

Timeline

2026-02-16

BeyondTrust flaw exploited for Active Directory control

2026-02-18

Critical flaw in Windows Admin Center reported

More articles in this cluster (2)

Threat Graph

5 entities, 6 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (3)

Data Breach
Privilege Escalation
T1068 - Exploitation for Privilege Escalation

Affected Platform (2)

Active Directory
Windows Admin Center

Relationships

Data Breach targets Active Directory
Data Breach targets Windows Admin Center
Privilege Escalation targets Active Directory
Privilege Escalation targets Windows Admin Center
T1068 - Exploitation for Privilege Escalation targets Active Directory
T1068 - Exploitation for Privilege Escalation targets Windows Admin Center

Continue Reading

Critical Zero-Day Exploits Target F5 and Check Point Products F5 Networks released emergency hotfixes for a critical zero-day vulnerability, CVE-2026-94127, in its BIG-IP Access Policy Manager on September 22, 2026, after confirming active exploitation. This flaw allows unauthenticated remote code execution (RCE) and has a CVSS score of 9.8. Concurrently, Check Point disclosed…

Critical Citrix NetScaler Zero-Day Vulnerabilities Exploited Citrix disclosed two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, affecting NetScaler ADC and Gateway systems, which are being actively exploited. Both vulnerabilities have a CVSS score of 9.5 and allow unauthenticated attackers to execute arbitrary commands remotely. CVE-2026-88771 arises…