CVE-2026-88075

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network...

CVE-2026-70049

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network...

CVE-2026-88075

The Microsoft Configuration Manager is susceptible to an SQL injection vulnerability (CWE-89) due to the improper neutralization of special elements used in an SQL command. An authorized attacker can exploit this flaw over a network to elevate privileges . Microsoft has released updates to addres...

EUVD-2026-100146

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network...

EUVD-2026-99742

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network...

CVE-2026-70049

A SQL injection vulnerability exists in Microsoft Configuration Manager due to the improper neutralization of special elements used in an SQL command. This flaw allows an authorized attacker to elevate privileges over an adjacent network. The vulnerability is assigned a High base severity score. ...

sccmhound

SCCMHound SCCMHound is a C BloodHound collector for Microsoft Configuration Manager MCM. If you're looking for a way to collect BloodHound session information from Configuration Manager's users and computers then this is the tool for you! Highly recommend importing collected data with another...

Configuration Manager Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network...

Microsoft Configuration Manager Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network...

CVE-2025-59213

Microsoft Configuration Manager ConfigMgr / SCCM 2503 Unauthenticated SQL injection CVE-2025-59213 exploit This script exploits the CVE-2025-59213 vulnerability, which allows an unauthenticated attacker with network access to a Management Point to execute arbitrary SQL queries on the site databas...

PT-2026-112905

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network...

PT-2026-112180

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network...

KLA91345 Multiple vulnerabilities in Microsoft System Center

Multiple vulnerabilities were found in Microsoft System Center. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft...

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit Proof-of-concept exploit chain I have discovered assigned as CVE-2026-47301 for Microsoft Configuration Manager SCCM, combining broken access control, CAB extraction-path traversal arbitrary file write, certificate verification bypass, and DLL...

The vulnerability of Microsoft Configuration Manager software for managing IT infrastructure, related to access control errors, allows attackers to escalate their privileges.

The vulnerability of Microsoft Configuration Manager software for managing IT infrastructure is related to access control errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

EUVD-2026-44352

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network...

CVE-2026-47301

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network...

CVE-2026-47301

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network...

CVE-2026-47301: Improper Access Control

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network...

PT-2026-58695

Name of the Vulnerable Software and Affected Versions Microsoft Configuration Manager version 2509 Description Improper access control allows an authorized attacker to elevate privileges over a network. This issue can be part of an exploit chain involving broken access, CAB arbitrary-write path...