Class familyMicrosoft · Configuration Manager
Microsoft Configuration Manager SQL injection flaws, 2024–2026
6 Configuration Manager CVEs with CWE-89 weaknesses, 8 Oct 2024 to 13 Oct 2026. 1 is in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2024’24
3 2025’25
2 2026’26
In CISA KEVNot in KEV
20241 CVE, 1 in KEV
20253 CVEs
20262 CVEs
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2024-43468KEV | 8 Oct 2024 | Microsoft Configuration Manager SQL Injection Vulnerability | Grouped by weakness | 74.8 |
| CVE-2025-47178 | 8 Jul 2025 | Microsoft Configuration Manager Remote Code Execution Vulnerability | Grouped by weakness | 28.1 |
| CVE-2025-55320 | 14 Oct 2025 | Configuration Manager Elevation of Privilege Vulnerability | Grouped by weakness | 15.2 |
| CVE-2025-59213 | 14 Oct 2025 | Configuration Manager Elevation of Privilege Vulnerability | Grouped by weakness | 17.2 |
| CVE-2026-70049 | 13 Oct 2026 | Microsoft Configuration Manager Elevation of Privilege Vulnerability | Grouped by weakness | 22.7 |
| CVE-2026-88075 | 13 Oct 2026 | Configuration Manager Elevation of Privilege Vulnerability | Grouped by weakness | 17.7 |