{"id":"CVE-2026-88075","published":"2026-10-13T19:21:26.270","lastModified":"2026-10-16T15:52:27.540","description":"Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-89"],"vendors":["microsoft"],"products":["configuration manager 2503","configuration manager 2509","configuration manager 2603"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88075","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This CVE describes a SQL injection vulnerability in Microsoft Configuration Manager that allows authenticated attackers to execute arbitrary SQL commands and elevate their privileges across the network. The flaw occurs when user-supplied input is not properly sanitized before being used in SQL queries.","exploitability":"Exploitation requires an authenticated user account with access to Configuration Manager, making it moderately difficult but possible to achieve privilege escalation through crafted SQL injection payloads.","blast_radius":"If exploited, this vulnerability could allow attackers to gain full administrative control over Configuration Manager instances, potentially leading to widespread compromise of managed devices and systems across the enterprise network.","remediation":"Upgrade to Microsoft Configuration Manager version 2503.1 or later, as this is the first fixed version mentioned in the CVE description.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["sql-injection","privilege-escalation","configuration-manager","enterprise"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:01:18.936Z"}}