Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:microsoft:configuration_manager_2409:*:*:*:*:*:*:*:*

1 brief RSS
low advisory

Privilege Escalation in Microsoft Configuration Manager AdminService API

CVE-2025-59501 is a privilege escalation vulnerability in the Microsoft Configuration Manager (SCCM) AdminService API that allows authenticated, low-privileged users to achieve full administrative control when Entra ID integration is enabled.

Configuration Manager 2403 +2 privilege-escalation sccm vulnerability
1t 1c