CVE-2026-47301

Configuration Manager Elevation of Privilege Vulnerability

State: Published
Severity: 8.8 High
Published: Jul 14, 2026
Updated: Nov 1, 2026
Reserved: May 18, 2026

Description

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	microsoft

Weaknesses

CWE-284 Improper Access Control

Affected Products

Product	Versions
Microsoft Configuration ManagerMicrosoft	1.0.0 to before 5.0.9135.1031Affected
Microsoft Configuration Manager 2509Microsoft	1.0.0 to before 5.0.9141.1030Affected
Microsoft Configuration Manager 2603Microsoft	1.0.0 to before 5.0.9146.1021Affected

References

Configuration Manager Elevation of Privilege Vulnerabilityvendor-advisorypatch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.