CVE-2026-20967

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-20967", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "state": "PUBLISHED", "assignerShortName": "microsoft", "dateReserved": "2025-12-04T20:04:16.341Z", "datePublished": "2026-03-10T17:05:06.160Z", "dateUpdated": "2026-06-19T18:17:48.858Z"}, "containers": {"cna": {"title": "System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability", "datePublic": "2026-03-10T14:00:00.000Z", "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:system_center_operations_manager_2019:*:-:*:*:*:*:*:*", "versionStartIncluding": "10.19.0", "versionEndExcluding": "10.19.10658.0"}, {"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:system_center_operations_manager_2022:*:-:*:*:*:*:*:*", "versionStartIncluding": "10.22.0", "versionEndExcluding": "10.22.11951.0"}, {"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:system_center_operations_manager_2025:*:-:*:*:*:*:*:*", "versionStartIncluding": "1.0.0", "versionEndExcluding": "10.25.10377.0"}]}]}], "affected": [{"vendor": "Microsoft", "product": "System Center Operations Manager 2019", "versions": [{"version": "10.19.0", "lessThan": "10.19.10658.0", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "System Center Operations Manager 2022", "versions": [{"version": "10.22.0", "lessThan": "10.22.11951.0", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "System Center Operations Manager 2025", "versions": [{"version": "1.0.0", "lessThan": "10.25.10377.0", "versionType": "custom", "status": "affected"}]}], "descriptions": [{"value": "Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network.", "lang": "en-US"}], "problemTypes": [{"descriptions": [{"description": "CWE-20: Improper Input Validation", "lang": "en-US", "type": "CWE", "cweId": "CWE-20"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2026-06-19T18:17:48.858Z"}, "references": [{"name": "System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability", "tags": ["vendor-advisory", "patch"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20967"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "baseSeverity": "HIGH", "baseScore": 8.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-05T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2026-20967"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-11T03:56:01.669Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-20967", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-03-10T18:01:49.765447Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-10T18:01:52.386Z"}}], "cna": {"title": "System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability", "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}, "scenarios": [{"lang": "en-US", "value": "GENERAL"}]}], "affected": [{"vendor": "Microsoft", "product": "System Center Operations Manager 2019", "versions": [{"status": "affected", "version": "10.19.0", "lessThan": "10.19.10658.0", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "System Center Operations Manager 2022", "versions": [{"status": "affected", "version": "10.22.0", "lessThan": "10.22.11951.0", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "System Center Operations Manager 2025", "versions": [{"status": "affected", "version": "1.0.0", "lessThan": "10.25.10377.0", "versionType": "custom"}]}], "datePublic": "2026-03-10T14:00:00.000Z", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20967", "name": "System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability", "tags": ["vendor-advisory", "patch"]}], "descriptions": [{"lang": "en-US", "value": "Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network."}], "problemTypes": [{"descriptions": [{"lang": "en-US", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20: Improper Input Validation"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:system_center_operations_manager_2019:*:-:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "10.19.10658.0", "versionStartIncluding": "10.19.0"}, {"criteria": "cpe:2.3:a:microsoft:system_center_operations_manager_2022:*:-:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "10.22.11951.0", "versionStartIncluding": "10.22.0"}, {"criteria": "cpe:2.3:a:microsoft:system_center_operations_manager_2025:*:-:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "10.25.10377.0", "versionStartIncluding": "1.0.0"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2026-06-19T18:17:48.858Z"}}}, "cveMetadata": {"cveId": "CVE-2026-20967", "state": "PUBLISHED", "dateUpdated": "2026-06-19T18:17:48.858Z", "dateReserved": "2025-12-04T20:04:16.341Z", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "datePublished": "2026-03-10T17:05:06.160Z", "assignerShortName": "microsoft"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "System Center Operations Manager 2019", "vendor": "Microsoft", "versions": [{"lessThan": "10.19.10658.0", "status": "affected", "version": "10.19.0", "versionType": "custom"}]}, {"product": "System Center Operations Manager 2022", "vendor": "Microsoft", "versions": [{"lessThan": "10.22.11951.0", "status": "affected", "version": "10.22.0", "versionType": "custom"}]}, {"product": "System Center Operations Manager 2025", "vendor": "Microsoft", "versions": [{"lessThan": "10.25.10377.0", "status": "affected", "version": "1.0.0", "versionType": "custom"}]}], "source": "secure@microsoft.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:2019:-:*:*:*:*:*:*", "matchCriteriaId": "0BFD64D6-E8BB-4606-8D4C-EAE586CAD791", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:2019:update_rollup_1:*:*:*:*:*:*", "matchCriteriaId": "60D16C06-DC8C-4990-A813-DC8FB599F2BD", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:2019:update_rollup_1_hotfix:*:*:*:*:*:*", "matchCriteriaId": "4E460428-07C5-4CC9-A8E1-3B9D1049C945", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:2019:update_rollup_2:*:*:*:*:*:*", "matchCriteriaId": "A06A8B5C-19CB-471E-A6CE-8A409A75D215", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:2019:update_rollup_2_hotfix:*:*:*:*:*:*", "matchCriteriaId": "00FE8943-EB78-4E7B-892D-89633450E1BC", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:2019:update_rollup_3:*:*:*:*:*:*", "matchCriteriaId": "C764DB6F-3551-4F97-9F1F-F558224034BA", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:2019:update_rollup_3_hotfix:*:*:*:*:*:*", "matchCriteriaId": "C7CBAAAF-FDD7-4FA7-AB25-AEEE2D7959FA", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:2019:update_rollup_4:*:*:*:*:*:*", "matchCriteriaId": "8EC811F7-AA65-405D-B25E-1A3DFA221322", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:2019:update_rollup_4_hotfix:*:*:*:*:*:*", "matchCriteriaId": "14BCC26E-10BF-4046-8000-0423161486A7", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:2019:update_rollup_5:*:*:*:*:*:*", "matchCriteriaId": "AE41DAE4-91BE-4198-9ACB-33481D9B216F", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:2019:update_rollup_5_hotfix:*:*:*:*:*:*", "matchCriteriaId": "596A894F-CDFC-4BB9-B3C0-73E1C8334025", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:2019:update_rollup_6:*:*:*:*:*:*", "matchCriteriaId": "AE42550B-80DB-4977-80FF-F1A329DE2663", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:2022:-:*:*:*:*:*:*", "matchCriteriaId": "ABD632BE-513E-4581-9C8C-3A13DA1ADF1F", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:2022:update_rollup_1:*:*:*:*:*:*", "matchCriteriaId": "A3C221E0-42CC-480E-B704-AF27429FA20E", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:2022:update_rollup_1_hotfix:*:*:*:*:*:*", "matchCriteriaId": "FDBC5F8D-F48D-4CAA-830A-181F3019A804", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:2022:update_rollup_2:*:*:*:*:*:*", "matchCriteriaId": "82E3989D-24AC-4229-9C61-4F6A7E15C592", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:2022:update_rollup_2_hotfix:*:*:*:*:*:*", "matchCriteriaId": "BC796BB3-1BBA-41FB-AA42-1C5643183835", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:2022:update_rollup_3:*:*:*:*:*:*", "matchCriteriaId": "E6ED73D7-3055-47FF-8641-A8AA3E3C43E4", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:2025:-:*:*:*:*:*:*", "matchCriteriaId": "0507AA0D-CBD5-400D-B24C-0549778F6029", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:2025:update_rollup_1:*:*:*:*:*:*", "matchCriteriaId": "ABE4BD19-1750-4C5D-B75C-05E9830AA632", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network."}, {"lang": "es", "value": "Validaci\u00f3n de entrada incorrecta en System Center Operations Manager permite a un atacante autorizado elevar privilegios a trav\u00e9s de una red."}], "id": "CVE-2026-20967", "lastModified": "2026-06-17T10:18:07.693", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "secure@microsoft.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20967", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-03-05T00:00:00+00:00", "version": "2.0.3"}}]}, "published": "2026-03-10T18:18:05.987", "references": [{"source": "secure@microsoft.com", "tags": ["Vendor Advisory"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20967"}], "sourceIdentifier": "secure@microsoft.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "secure@microsoft.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[10.19.0,10.19.10658.0)"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "System Center Operations Manager 2019", "source": "cna", "vendor": "Microsoft"}, "product": "system_center_operations_manager_2019", "vendor": "microsoft"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[10.22.0,10.22.11951.0)"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "System Center Operations Manager 2022", "source": "cna", "vendor": "Microsoft"}, "product": "system_center_operations_manager_2022", "vendor": "microsoft"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[1.0.0,10.25.10377.0)"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "System Center Operations Manager 2025", "source": "cna", "vendor": "Microsoft"}, "product": "system_center_operations_manager_2025", "vendor": "microsoft"}], "analysis": {"en": {"generated_at": "2026-03-16T23:20:17.430461+00:00", "value": {"mitigation_remediation": ["Apply the latest Microsoft SCOM update for the affected 2019, 2022, or 2025 release, as detailed in the Microsoft advisory.", "Verify that the patch has been successfully applied on all SCOM servers.", "Restrict network access to SCOM management components until the patch is deployed to prevent potential exploitation.", "Monitor SCOM logs and security alerts for any anomalous privilege escalation activity."], "summary": {"action": "Apply Patch", "impact": "Privilege Escalation"}, "threat_synthesis": {"affected_systems": "The affected products are Microsoft System Center Operations Manager versions 2019, 2022, and 2025. All update rollups listed in the CPE data are potentially vulnerable, meaning any installation of these product releases prior to the Microsoft patch referenced in the advisory is susceptible. No specific patch release numbers are provided in the CVE entry, but the vendor advisory URL indicates that Microsoft has issued a fix for these releases.", "description_and_impact": "Improper input validation in Microsoft System Center Operations Manager (SCOM) allows an attacker who has authorized access to the system to elevate their privileges over a network. The vulnerability could enable a low\u2011privileged user to gain additional rights and potentially execute arbitrary commands or actions within the SCOM environment, thereby compromising confidentiality, integrity, and availability of monitoring data and related resources. The weakness is identified as CWE\u201120, reflecting an improper input validation flaw.", "risk_and_exploitability": "The CVSS score of 8.8 denotes high severity, with a low EPSS probability (<1%) suggesting that exploitation is unlikely in the near term. The vulnerability is not listed in the CISA KEV catalog, further indicating moderate risk. Based on the description, the likely attack vector is network\u2011based, requiring the attacker to be authenticated with at least some authorized access to the SCOM environment; from that position the attacker could supply crafted input to trigger the privilege escalation. No official workaround is provided by Microsoft, emphasizing the need for timely patching."}}}}, "created": "2026-03-11T11:45:45.405615+00:00", "updated": "2026-03-20T14:34:20.466176+00:00", "vendors": ["microsoft", "microsoft$PRODUCT$system_center_operations_manager_2019", "microsoft$PRODUCT$system_center_operations_manager_2022", "microsoft$PRODUCT$system_center_operations_manager_2025"]}