CVE-2026-47301

HIGH

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.

CVSS v3.1 Score

8.8
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Published: 7/14/2026Modified: 7/30/2026

Related Intelligence (1)

LOWVulnerability

It took $58 to break Microsoft’s SCCM, but a patch made it harder

Researchers at XM Cyber found that a standard domain user with no Microsoft SCCM privileges can chain multiple flaws to reach remote code execution, although the attack does require network access to the SCCM environment. Enterprises use Microsoft System Center Configuration Manager ( SCCM ) to deploy operating systems, manage patches, distribute software, and monitor compliance across large Windo

CVE-2026-47301
CSO Online

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47301Vendor Advisory