8.8
Élevée
CVE-2026-88075 Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration…
Description
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft Configuration Manager 1.0 | 1.0.0 → < 5.00.9135.1040 | 5.00.9135.1040 |
| Microsoft Configuration Manager 2509 1.0 | 1.0.0 → < 5.00.9141.1039 | 5.00.9141.1039 |
| Microsoft Configuration Manager 2603 1.0 | 1.0.0 → < 5.00.9146.1026 | 5.00.9146.1026 |
Autres CVE de Microsoft Configuration Manager
Les 9 CVE de Microsoft Configuration Manager →
CVE-2026-70049
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration…
8.0
Élevée
CVE-2026-47301
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a…
8.8
Élevée
CVE-2025-47179
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally
6.7
Moyenne
CVE-2025-59501
Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing…
4.8
Moyenne