CVE-2026-70049 in Configuration Manager

Tóm tắt

Bởi MITRE • 14/10/2026

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• chịu trách nhiệm: Microsoft
• Đặt trước: 04/08/2026
• Tiết lộ: 14/10/2026
• Kiểm duyệt: được chấp nhận
• mục: VDB-418205
• CPE: 20261014
• CWE: CWE-89 (Đã xác nhận)
• CVSS: 8.0 (CNA)
• EPSS: 0.02275
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-70049
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-70049
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-70049/