CVE-2024-43468criticalunder attackCWE-89

CVE-2024-43468: critical vulnerability in Microsoft Configuration Manager

Microsoft Configuration Manager Remote Code Execution Vulnerability

Published · Updated

Follow this CVE+ Monitor Microsoft Configuration Manager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA, has an official Brazilian government alert and has a public proof of concept.

ssvc Actcvss 9.8epss 81%
from disclosure to weapon49 days
Published on NVDOct 8
1st PoC+49d
CISA KEV+492d
Official alert in Brazil

Brazil's federal government published an alert, recommendation or bulletin that cites this vulnerability.

  • CTIR Gov · ALERTA 11/2026Vulnerabilidade crítica no Microsoft Configuration Managerread on gov.br ↗
Source: CTIR Gov (GSI) and CISC Gov.br, under the CC BY-ND 3.0 license.
Action required by CISAfederal deadline: 2026-03-05

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

A critical flaw in Microsoft Configuration Manager allows attackers to execute arbitrary code remotely without needing special permissions. This vulnerability enables complete system compromise through SQL injection techniques.

Technical detail

SQL injection vulnerability (CWE-89) in Microsoft Configuration Manager permits unauthenticated remote code execution with no user interaction required. The attack exploits improper input validation in database queries, allowing attackers to inject malicious SQL commands and execute arbitrary code with SYSTEM privileges.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Microsoft Configuration Manager Remote Code Execution Vulnerability
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected products
Microsoft · Microsoft Configuration Manager
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Microsoft Configuration Manager

In the same product, most dangerous first.

CVE-2025-59501MEDIUMMicrosoft Configuration Manager Spoofing VulnerabilityEPSS 3.3%CVE-2025-47178HIGHMicrosoft Configuration Manager Remote Code Execution VulnerabilityEPSS 3.0%CVE-2026-70049HIGHMicrosoft Configuration Manager Elevation of Privilege VulnerabilityEPSS 2.7%CVE-2026-47301HIGHConfiguration Manager Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2026-88075HIGHConfiguration Manager Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2025-55320MEDIUMConfiguration Manager Elevation of Privilege VulnerabilityEPSS 0.7%