Configuration Manager 2509 CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2026-88075

Configuration Manager Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Configuration Manager 2503 Configuration Manager 2509 Configuration Manager 2603

CVE-2026-70049

Microsoft Configuration Manager Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.

CVSS 3.1 · 8 High EPSS 2.7% KEV · Not listed

Vendors

Microsoft

Products

Configuration Manager 2503 Configuration Manager 2509 Configuration Manager 2603

CVE-2026-47301

Configuration Manager Elevation of Privilege Vulnerability

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.

CVSS 3.1 · 8.8 High EPSS 1.0% KEV · Not listed

Vendors

Microsoft

Products

Configuration Manager Configuration Manager 2503 Configuration Manager 2509 and 1 more

Page 1 of 1.