8.8
High
CVE-2026-20967 Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a…
Description
Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| System Center Operations Manager 2019 10.19 | 10.19.0 → < 10.19.10658.0 | 10.19.10658.0 |
| System Center Operations Manager 2022 10.22 | 10.22.0 → < 10.22.11951.0 | 10.22.11951.0 |
| System Center Operations Manager 2025 1.0 | 1.0.0 → < 10.25.10377.0 | 10.25.10377.0 |