Back Cybersecuritynews

CISA Warns of Microsoft Configuration Manager SQL Injection Vulnerability Exploited in Attacks

Cybersecuritynews •Abinaya • February 14, 2026

CISA has issued an urgent alert a critical SQL injection vulnerability in Microsoft Configuration Manager (SCCM). Tracked as CVE-2024-43468, this flaw lets unauthenticated attackers run malicious commands on servers and databases. Added to CISA’s Known Exploited Vulnerabilities (KEV) catalog on February 12, 2026, agencies must patch by March 5, 2026, or face federal mandates. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Issues Warning on SQL Injection Vulnerability in Microsoft Configuration Manager The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding a critical SQL injection vulnerability in Microsoft Configuration Manager that is currently being actively exploited. Organizations using this software are urged to take immediate action to mitigate the risk associated with this vulnerability. 8 sources 72

Extracted Entities

Attack Types (1)

Sql Injection

CVEs (1)

CVE-2024-43468