CVE-2026-47301

Name of the Vulnerable Software and Affected Versions Microsoft Configuration Manager version 2509

Description Improper access control allows an authorized attacker to elevate privileges over a network. This issue can be part of an exploit chain involving broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution. DLL hijacking is a technique where a malicious library is loaded instead of the intended one.

Recommendations Update Microsoft Configuration Manager version 2509 to the latest patched version.