Skip to content
Threat Feed
Subscribe

Product

Configuration Manager 2403 (< 5.00.9128.1037)

1 brief RSS
low advisory

Privilege Escalation in Microsoft Configuration Manager AdminService API

CVE-2025-59501 is a privilege escalation vulnerability in the Microsoft Configuration Manager (SCCM) AdminService API that allows authenticated, low-privileged users to achieve full administrative control when Entra ID integration is enabled.

Configuration Manager 2403 +2 privilege-escalation sccm vulnerability
1t 1c