CVE-2026-88075— Configuration Manager Elevation of Privilege Vulnerability
Quick assessment
Affected
Microsoft Microsoft Configuration Manager
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Microsoft Configuration Manager 中存在一种“在 SQL 命令中不正确地中和特殊元素”（即 SQL 注入）漏洞，允许已授权的攻击者通过网络提升权限。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 3
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Microsoft | Microsoft Configuration Manager | 1.0.0< 5.00.9135.1040 |
affected |
| Microsoft | Microsoft Configuration Manager 2509 | 1.0.0< 5.00.9141.1039 |
affected |
| Microsoft | Microsoft Configuration Manager 2603 | 1.0.0< 5.00.9146.1026 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-88075
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Configuration Manager Elevation of Privilege Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Microsoft | Microsoft Configuration Manager | 1.0.0 ~ 5.00.9135.1040 | - |
|
| Microsoft | Microsoft Configuration Manager 2509 | 1.0.0 ~ 5.00.9141.1039 | - |
|
| Microsoft | Microsoft Configuration Manager 2603 | 1.0.0 ~ 5.00.9146.1026 | - |
|
II. Public POCs for CVE-2026-88075
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-88075
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-88075 (1)
Same Patch Batch · Microsoft · 2026-10-13 · 1407 CVEs total
| CVE-2026-69705 | 9.8 CRITICAL | Windows iSCSI Remote Code Execution Vulnerability |
| CVE-2026-83935 | 9.8 CRITICAL | Microsoft XML Remote Code Execution Vulnerability |
| CVE-2026-70153 | 9.8 CRITICAL | Microsoft PostScript Printer Driver Remote Code Execution Vulnerability |
| CVE-2026-70147 | 9.8 CRITICAL | Microsoft PostScript Printer Driver Remote Code Execution Vulnerability |
| CVE-2026-70242 | 9.8 CRITICAL | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-83869 | 9.8 CRITICAL | Windows Domain Name Service Remote Code Execution Vulnerability |
| CVE-2026-85806 | 9.8 CRITICAL | Network Policy Server (NPS) Remote Code Execution Vulnerability |
| CVE-2026-83519 | 9.8 CRITICAL | Windows Error Reporting Remote Code Execution Vulnerability |
| CVE-2026-105010 | 9.8 CRITICAL | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-102210 | 9.8 CRITICAL | Windows Text Shaping Remote Code Execution Vulnerability |
| CVE-2026-96909 | 9.8 CRITICAL | Windows BitLocker Remote Code Execution Vulnerability |
| CVE-2026-88178 | 9.8 CRITICAL | Microsoft Office PowerPoint Remote Code Execution Vulnerability |
| CVE-2026-88156 | 9.8 CRITICAL | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-85792 | 9.8 CRITICAL | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| CVE-2026-69634 | 9.8 CRITICAL | Windows iSCSI Remote Code Execution Vulnerability |
| CVE-2026-97816 | 9.8 CRITICAL | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability |
| CVE-2026-96113 | 9.8 CRITICAL | Windows Domain Name Service Remote Code Execution Vulnerability |
| CVE-2026-96934 | 9.8 CRITICAL | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-96924 | 9.8 CRITICAL | Windows OLE Remote Code Execution Vulnerability |
| CVE-2026-97815 | 9.8 CRITICAL | Windows Error Reporting Remote Code Execution Vulnerability |
Showing top 20 of 1407 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Microsoft Configuration Manager
-
CVE-2026-70049
Microsoft Configuration Manager Elevation of Privilege Vulne -
CVE-2026-47301
Configuration Manager Elevation of Privilege Vulnerability -
CVE-2025-47179
Configuration Manager Elevation of Privilege Vulnerability -
CVE-2025-59501
Microsoft Configuration Manager Spoofing Vulnerability -
CVE-2025-59213
Configuration Manager Elevation of Privilege Vulnerability
Same vendor: Microsoft
-
CVE-2026-88164
Microsoft Office SharePoint Elevation of Privilege Vulnerabi -
CVE-2026-94512
SQL Server Remote Code Execution Vulnerability -
CVE-2026-94520
Microsoft SQL Server Denial of Service Vulnerability -
CVE-2026-85919
Microsoft SQL Server Elevation of Privilege Vulnerability -
CVE-2026-88084
Microsoft SQL Server Denial of Service Vulnerability
Same weakness: CWE-89
-
CVE-2026-110840
n8n before 2.41.4 and 2.42.1 SQL Injection via Microsoft SQL -
CVE-2026-110670
cemtan sar2html Archive Processing sar2html.py updateDb sql -
CVE-2026-55684
WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca -
CVE-2026-55681
WeGIA: SQL Injection in html/matPat/restaurar_produto_desocu -
CVE-2026-55680
WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.ph
V. Comments for CVE-2026-88075
No comments yet