CVE Feed

    Dashboard / CVE / CVE-2024-43468

    CVE-2024-43468

    Microsoft Configuration Manager Remote Code Execution Vulnerability

    Published:Oct 8, 2024
    Last Modified:Feb 13, 2026
    EPS:Oct 8, 2024
    EPSS Score:0.86393
    CVSS Score:9.8

    CISA Notification

    Description

    Microsoft Configuration Manager Remote Code Execution Vulnerability

    Required Action:

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

    Notes:

    No extra notes provided.

    Due Date
    Mar 5, 2026
    190 days ago
    Alert Date
    Feb 12, 2026
    211 days ago

    Affected Products

    Vendor
    Microsoft
    Product
    Configuration Manager
    Vendor
    Microsoft
    Product
    Configuration Manager 2403
    Vendor
    Microsoft
    Product
    Configuration Manager 2409
    Vendor
    Microsoft
    Product
    Configuration Manager 2503

    Exploits

    https://github.com/nikallass/CVE-2024-43468_mTLS_gohttps://github.com/synacktiv/CVE-2024-43468

    Related CVEs

    CVE-2026-47301 (CVSS 8.8) — Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges…
    CVE-2025-47179 (CVSS 6.7) — Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges…
    CVE-2025-59501 (CVSS 4.8) — Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform …
    CVE-2025-59213 (CVSS 8.8) — Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuratio…
    CVE-2025-55320 (CVSS 6.8) — Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuratio…
    CVE-2025-47178 (CVSS 8) — Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuratio…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High