CVE-2026-50444 – Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

A missing authentication check in Windows Server Update Service (WSUS) allows an authorized attacker with low privileges to elevate their permissions over the network. Although an attacker must already have limited access to the environment, successful exploitation can lead to significantly higher privileges, enabling unauthorized control over affected systems and increasing the potential for further compromise across the network.

CVSS Score: 8.8

SEVERITY: Critical

THREAT:
This vulnerability is caused by CWE-306: Missing Authentication for Critical Function, allowing an authorized attacker with low privileges to elevate their permissions over a network. By bypassing authentication for a critical function, an attacker may gain access to resources and capabilities that should be restricted, increasing the likelihood of complete system compromise and lateral movement within an enterprise environment.

EXPLOITS:
At the time of publication, Microsoft assesses exploitation as less likely. There is no public disclosure, no evidence of active exploitation, and no confirmed public proof-of-concept (PoC) exploit in the provided data.

TECHNICAL SUMMARY:
The vulnerability exists because Windows Server Update Service (WSUS) fails to properly enforce authentication for a critical function. This missing authentication mechanism allows an attacker with low privileges to invoke functionality that should require stronger authorization. Successful exploitation enables privilege escalation, allowing the attacker to perform actions beyond their intended permissions. Since the vulnerability is exploitable over the network without user interaction, it presents a significant security concern in environments where attackers have already obtained limited access.

EXPLOITABILITY:
Affected products include supported versions of Windows 10, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, Windows Server 2019, Windows Server 2022, and Windows Server 2025, including applicable Server Core installations listed in the advisory. Exploitation requires an attacker to have low privileges and network access to the vulnerable system. No user interaction is required.

BUSINESS IMPACT:
Privilege escalation vulnerabilities can allow attackers to expand their control after gaining an initial foothold. Once elevated privileges are obtained, attackers may disable security controls, access sensitive information, deploy malicious software, modify system configurations, and move laterally to other systems. In enterprise environments, this can significantly increase the impact of an initial compromise and lead to broader operational disruption.

WORKAROUND:
No mitigations or workarounds are available. Applying the Microsoft security update is the recommended remediation.

URGENCY:
This vulnerability is rated Critical with a CVSS v3.1 Base Score of 8.8. While Microsoft currently assesses exploitation as less likely, the absence of available mitigations and the potential for attackers to elevate privileges over the network make timely deployment of the security update an important priority, particularly for systems running WSUS.