configuration_manager_2603 vulnerabilities
CVEs whose affected-version data names the configuration_manager_2603 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-88075High· 8.8Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.
▾ Twilightmicrosoft · configuration_manager_2503EPSS 0.83%via NVD
CVE-2026-70049High· 8.0Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.
▾ TwilightMicrosoft · Microsoft Configuration ManagerEPSS 2.7%via NVD
CVE-2026-47301High· 8.8PoCConfiguration Manager Elevation of Privilege Vulnerability
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.
▾ MidnightMicrosoft · Microsoft Configuration ManagerEPSS 0.78%via CVEORG