Is CVE-2026-56171 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-56171 being exploited in the wild.

How severe is CVE-2026-56171?

High severity, with a CVSS score of 7.1, published 17 July 2026.

Which products and versions are affected?

Microsoft Remote Desktop Web Client 2.0.0.0 to 2.1.65.2; Microsoft Windows Admin Center 1809.0 to 2.7.4.

Is there a fix for CVE-2026-56171?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-56171 attacked?

It is attacked over the network, in an operating system.

Am I affected by CVE-2026-56171?

Check whether you run Microsoft Remote Desktop Web Client or Microsoft Windows Admin Center at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-56171: Microsoft Windows RDP information disclosure in Remote Desktop Web Client

CVE-2026-56171 · Severity: high · CVSS 7.1 · Published 2026-07-17

A security vulnerability in Microsoft's Remote Desktop Web Client and Windows Admin Center could allow an unauthorized person to access private personal information over the network. This tool is commonly used by IT staff to manage servers and by employees to access office computers remotely. An exploit could lead to the exposure of sensitive user data, potentially compromising privacy and providing attackers with information useful for further attacks.

Technologies: Microsoft Windows Admin Center. Vendors: Microsoft.

Quick answers

Is CVE-2026-56171 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-56171 being exploited in the wild.
How severe is CVE-2026-56171?: High severity, with a CVSS score of 7.1, published 17 July 2026.
Which products and versions are affected?: Microsoft Remote Desktop Web Client 2.0.0.0 to 2.1.65.2; Microsoft Windows Admin Center 1809.0 to 2.7.4.
Is there a fix for CVE-2026-56171?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-56171 attacked?: It is attacked over the network, in an operating system.
Am I affected by CVE-2026-56171?: Check whether you run Microsoft Remote Desktop Web Client or Microsoft Windows Admin Center at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This vulnerability is classified as an exposure of private personal information (CWE-359) within the Microsoft Remote Desktop Web Client and Windows Admin Center. The flaw allows an unauthenticated attacker to disclose sensitive information over the network, though it requires some level of user interaction (UI:R). The root cause involves improper handling of data within the RDP web interface components. Affected versions include Remote Desktop Web Client versions prior to 2.1.65.2 and Windows Admin Center versions prior to 2.7.4. Microsoft has released updates to address this information disclosure risk.

Affected products

Microsoft Remote Desktop Web Client 2.0.0.0 to 2.1.65.2
Microsoft Windows Admin Center 1809.0 to 2.7.4

Timeline

2026-07-17: advisory: Initial disclosure by Microsoft and NVD publication.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56171

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.