Microsoft Configuration Manager 2509 vulnerabilities

2 known vulnerabilities in Microsoft Configuration Manager 2509 from Microsoft. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Microsoft Configuration Manager: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-88075Oct 13, 2026Microsoft

  Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.

• 8.0 High severity

  Microsoft Configuration Manager: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-70049Oct 13, 2026MicrosoftEPSS 2.66%

  Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.