CVE-2024-43468: Microsoft Configuration Manager SQL Injection Vulnerability

Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2026-02-12. EPSS: 81% chance of exploitation in the next 30 days.

Microsoft Configuration Manager Remote Code Execution Vulnerability

Affected products

• Microsoft Configuration Manager 2403: affected versions not specified
• Microsoft Configuration Manager 2409: affected versions not specified
• Microsoft Configuration Manager 2503: affected versions not specified

Published 2024-10-08. Last modified 2026-06-17.