CVE-2026-20967HighCVSS 8.8
System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network.
🎯 Affected products3
- System Center Operations Manager 2019
- System Center Operations Manager 2022
- System Center Operations Manager 2025
✅ Remediation
KBRelease Notes (Security Update) — fixed build 10.19.10658.0 KBRelease Notes (Security Update) — fixed build 10.22.11951.0 KBRelease Notes (Security Update) — fixed build 10.25.10377.0
🔗 References (7)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20967
- patchhttps://download.microsoft.com/download/41161b3f-c8ec-44b0-8ecf-fb376a35a1dd/KB5073251-AMD64-ENU-WebConsole.msp
- referencehttps://learn.microsoft.com/en-us/system-center/scom/release-build-versions?view=sc-om-2019
- patchhttps://download.microsoft.com/download/9da5b0a9-f1f0-436a-b0c9-927a4e578974/KB5071859-amd64-WebConsole.msp
- referencehttps://learn.microsoft.com/en-us/system-center/scom/release-build-versions?view=sc-om-2022
- patchhttps://download.microsoft.com/download/7ef9deaa-4e74-42b7-af3c-e2b9bd9dfc4b/KB5073079-amd64-WebConsole.msp
- referencehttps://learn.microsoft.com/en-us/system-center/scom/release-build-versions?view=sc-om-2025