CVE-2026-88075
CVE-2026-88075 · Configuration Manager Elevation of Privilege Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.
CVSS 8.8 · High · EPSS 0.6% · Fix available
- Published
- Updated
Affected products and versions
microsoft configuration manager
- Versions
- ≥ 1.0.0, < 5.00.9135.1040: Affected (custom)
Update to 5.00.9135.1040
microsoft configuration manager 2509
- Versions
- ≥ 1.0.0, < 5.00.9141.1039: Affected (custom)
Update to 5.00.9141.1039
microsoft configuration manager 2603
- Versions
- ≥ 1.0.0, < 5.00.9146.1026: Affected (custom)
Update to 5.00.9146.1026