Configuration Manager 2603 CVEs and Security Vulnerabilities

CVE-2026-119991

Microsoft Configuration Manager Information Disclosure Vulnerability

Weak authentication in Microsoft Configuration Manager allows an unauthorized attacker to disclose information over a network.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Configuration Manager 2603

CVE-2026-88075

Configuration Manager Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Configuration Manager 2503 Configuration Manager 2509 Configuration Manager 2603

CVE-2026-70049

Microsoft Configuration Manager Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.

CVSS 3.1 · 8 High EPSS 2.7% KEV · Not listed

Vendors

Microsoft

Products

Configuration Manager 2503 Configuration Manager 2509 Configuration Manager 2603

CVE-2026-47301

Configuration Manager Elevation of Privilege Vulnerability

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.

CVSS 3.1 · 8.8 High EPSS 1.0% KEV · Not listed

Vendors

Microsoft

Products

Configuration Manager Configuration Manager 2503 Configuration Manager 2509 and 1 more

Search vulnerabilities

Microsoft Configuration Manager Information Disclosure Vulnerability

Configuration Manager Elevation of Privilege Vulnerability

Microsoft Configuration Manager Elevation of Privilege Vulnerability

Configuration Manager Elevation of Privilege Vulnerability