Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Security researchers from XM Cyber have identified a chain of vulnerabilities in Microsoft System Center Configuration Manager (SCCM) that allows standard domain users to achieve remote code execution. The attack exploits multiple flaws, including CVE-2026-47301, which was patched in July 2026, but...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding a critical SQL injection vulnerability in Microsoft Configuration Manager that is currently being actively exploited. Organizations using this software are urged to take immediate action to mitigate the r...
Microsoft has released a patch for CVE-2026-21525, a vulnerability in the RasMan component that can crash Windows VPN services and disrupt remote access. This flaw has been actively exploited, prompting its addition to the CISA KEV list on February 10, 2026.