Configuration Manager 2509 vulnerabilities

1 known vulnerability in Configuration Manager 2509 from Microsoft. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Microsoft Configuration Manager: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-88075Oct 13, 2026Microsoft

  Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.