CVE-2026-47301: Microsoft Configuration Manager 2503

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.

Affected products

• Microsoft Configuration Manager 2503: affected versions not specified
• Microsoft Configuration Manager 2509: affected versions not specified
• Microsoft Configuration Manager 2603: affected versions not specified

Published 2026-07-14. Last modified 2026-07-30.