ZDI-CAN-30003: ZDI-26-417: Microsoft Windows ServerManager Exposed Dangerous Method Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-50311.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-30003?
The vulnerability ZDI-CAN-30003 has a CVSS rating of 7.8, indicating a high severity level.
How can I mitigate ZDI-CAN-30003?
To mitigate ZDI-CAN-30003, ensure that your Microsoft Windows Server installations are updated with the latest security patches provided by Microsoft.
What systems are affected by ZDI-CAN-30003?
ZDI-CAN-30003 affects installations of Microsoft Windows Server that utilize the ServerManager component.
What type of attack does ZDI-CAN-30003 enable?
ZDI-CAN-30003 allows local attackers to escalate their privileges on the affected Microsoft Windows Server installations.
What is required for an attacker to exploit ZDI-CAN-30003?
An attacker must have the ability to execute low-privileged code on the target system to exploit the ZDI-CAN-30003 vulnerability.