high8.8
CVE-2026-47301
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.
Impact
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Configuration Manager 2503 | All versions |
| Microsoft | Configuration Manager 2509 | All versions |
| Microsoft | Configuration Manager 2603 | All versions |
| Microsoft | Microsoft Configuration Manager | from 1.0.0 before 5.0.9135.1031 |
| Microsoft | Microsoft Configuration Manager 2509 | from 1.0.0 before 5.0.9141.1030 |
| Microsoft | Microsoft Configuration Manager 2603 | from 1.0.0 before 5.0.9146.1021 |