Improper Access Control in Microsoft Configuration Manager
CVE-2026-47301

8.8HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft Configuration Manager
Microsoft Configuration Manager 2509
Microsoft Configuration Manager 2603
Vendor
CVE Published:
14 July 2026

Badges

📈 Trended📈 Score: 2,500👾 Exploit Exists📰 News Worthy

What is CVE-2026-47301?

CVE-2026-47301 is a vulnerability affecting Microsoft Configuration Manager, a software product that enables IT administrators to manage large groups of computers and ensure the consistency and security of their IT environments. This vulnerability arises from improper access control mechanisms within the software, allowing an attacker who has been authorized to gain elevated privileges over a network. Such unauthorized access could lead to malicious activities, including the ability to manipulate system settings or access sensitive data, which can severely undermine an organization’s security posture. Without proper controls, attackers can further exploit these elevated privileges to perform unauthorized actions that could compromise the integrity and confidentiality of the data managed by Microsoft Configuration Manager.

Potential impact of CVE-2026-47301

  1. Elevation of Privileges: The vulnerability allows unauthorized users to gain higher-level access within the Microsoft Configuration Manager environment, potentially enabling them to execute administrative commands or access sensitive areas of the IT infrastructure.

  2. Data Exposure: With elevated privileges, an attacker may access confidential data stored within the system, which could lead to data breaches and unauthorized data disclosures that can have a lasting impact on an organization's reputation and compliance status.

  3. System Manipulation: Attackers exploiting this vulnerability could modify system configurations, install malicious software, or disrupt the normal operations of the IT environment, leading to operational downtime, additional security incidents, and recovery costs.

Affected Version(s)

Microsoft Configuration Manager 1.0.0 < 5.0.9135.1031

Microsoft Configuration Manager 2509 1.0.0 < 5.0.9141.1030

Microsoft Configuration Manager 2603 1.0.0 < 5.0.9146.1021

News Articles

favicon imageCybersecuritynews

Public Exploit Code Released for Microsoft SCCM Remote Code Execution Vulnerability

Public PoC code for critical SCCM RCE vulnerability CVE-2026-47301 could let low-privileged domain users gain SYSTEM access on Primary Site Servers.

3 weeks ago

favicon imageTechtimes

Microsoft's SCCM Lets Attackers Compromise Enterprise Fleets for $58 Until October

SCCM vulnerability 2026: XM Cyber researcher Omri Baso demonstrated that any enterprise employee with a standard Windows login can chain four Microsoft Configuration Manager flaws to seize

3 weeks ago

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 📈

    Vulnerability started trending

  • 👾

    Exploit known to exist

  • 📰

    First article discovered by Techtimes

  • Vulnerability published

  • Vulnerability Reserved

.