CISA Issues Warning on SQL Injection Vulnerability in Microsoft Configuration Manager

CISA Issues Warning on SQL Injection Vulnerability in Microsoft Configuration Manager

First seen 13 Feb 2026, 11:10 UTC GbhackersCyberpressBleepingcomputerTheregisterCybersecuritynews+2 71.8

Article Content

Browse articles
ThreatCluster

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding a critical SQL injection vulnerability in Microsoft Configuration Manager that is currently being actively exploited. Organizations using this software are urged to take immediate action to mitigate the risk associated with this vulnerability.

Timeline

2026-02-13
CISA warns of SQL injection vulnerability in Microsoft Configuration Manager