{"vulnerability": "cve-2026-47301", "sightings": [{"uuid": "982d1d63-341e-415c-986b-d90aed86284a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://bsky.app/profile/r1cksec.bsky.social/post/3mtinxaznxk2v", "content": "PoC exploit chain (CVE-2026-47301) for SCCM, combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution.\n\ngithub.com/OmriBaso/SCC...\n\n#infosec #cybersecurity #pentest #cve #redteam", "creation_timestamp": "2026-08-20T06:53:35.879695Z"}, {"uuid": "12bb1dc8-16d1-4d73-800f-0d4086027081", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://t.me/bdufstecru/3394", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0418\u0422-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 Microsoft Configuration Manager \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0440\u0430\u0437\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438\n\nBDU:2026-11890\nCVE-2026-47301\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47301", "creation_timestamp": "2026-08-19T16:00:03.748421Z"}, {"uuid": "c58eb244-64e0-4c9c-8852-640e8cc5c95f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "published-proof-of-concept", "source": "Telegram/t1QqKCQA32iQQM5dMX6BnGOwIoCN3RgMOFB7xsm5WfPwX6Ds", "content": "", "creation_timestamp": "2026-08-16T22:00:04.585229Z"}, {"uuid": "5bedb033-c3f8-43a2-a5b9-8a4cb02c9c6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtae6u2psc2o", "content": "CVE-2026-47301 is trending. Hype score 5, currently #7 on cvemon.\n\nImproper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-47301", "creation_timestamp": "2026-08-16T23:37:33.321810Z"}, {"uuid": "c0b75cef-0c07-42b2-8b7c-d1a2aa545076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "published-proof-of-concept", "source": "Telegram/t1QqKCQA32iQQM5dMX6BnGOwIoCN3RgMOFB7xsm5WfPwX6Ds", "content": "", "creation_timestamp": "2026-08-17T00:00:09.197651Z"}, {"uuid": "8cfe1c5c-9886-4f45-a4d3-b47a06e5770a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtjcswsxer22", "content": "CVE-2026-47301: PoC Exploit Achieves SYSTEM-Level Code Execution in SCCM", "creation_timestamp": "2026-08-20T13:06:57.771998Z"}, {"uuid": "ac10d3fe-cbff-4f9e-ac79-f383e671ed46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://bsky.app/profile/j4vv4d.com/post/3mt2x4tloil2n", "content": "SCCM sits in your infrastructure like a master key. One HTTP POST from literally anyone in your domain and an attacker owns the whole thing. Patch CVE-2026-47301 now. ...\n\nhttps://api.cyfluencer.com/s/potential-for-remote-code-execution-in-microsoft-sccm-via-newly-discovered-exploit-chain-28995", "creation_timestamp": "2026-08-14T20:00:29.063790Z"}, {"uuid": "84615d54-3f3b-4997-9fa4-60eb9850b96b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47301", "type": "seen", "source": "https://bsky.app/profile/mybestia.bsky.social/post/3mtbogjb7rl2t", "content": "\ud83d\udd25 CVE-2026-47301: De elevaci\u00f3n de privilegios SCCM a SYSTEM\n\nhttps://mybestia.com/blog/cve-2026-47301-de-elevacion-de-privilegios-sccm-a-system\n\n\ud83d\udd14 https://www.youtube.com/@fjqg?sub_confirmation=1 \ud83e\udd16 IA", "creation_timestamp": "2026-08-17T12:13:27.367199Z"}, {"uuid": "65bfa67b-807f-4c3d-9c20-7ffd7fb12f45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfpsfcx5c2c", "content": "\ud83d\udea8 CVE-2026-47301 \u2014 Microsoft SCCM Vulnerability\n\nCVSS 8.8 \u2022 Low privileges \u2022 No user interaction \u2022 Public PoC available \u2022 Attack chain can lead to SYSTEM code execution.\n\nstemshop.top/blog/cve-202...\n\n#CVE #CVE202647301 #Microsoft #SCCM #RCE #CyberSecurity #InfoSec #PoC", "creation_timestamp": "2026-08-19T02:48:42.944837Z"}, {"uuid": "0a971a83-53c9-43c5-b4a2-9dd99bb64f41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://t.me/bdufstecru/3394", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0418\u0422-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 Microsoft Configuration Manager \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0440\u0430\u0437\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438\n\nBDU:2026-11890\nCVE-2026-47301\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47301", "creation_timestamp": "2026-08-20T00:00:28.214197Z"}, {"uuid": "ef4f9a6b-4012-45be-8f9c-047b3c5a8fa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://t.me/GithubRedTeam/97908", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a OmriBaso\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C#\n\u2b50 Star\u6570\u91cf\uff1a 4  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-13 14:50:06\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-13T16:00:03.636914Z"}, {"uuid": "463ce4bd-6559-42cc-bb56-e5209e0db729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/117089950247916382", "content": "SCCM RCE PoC (CVE-2026-47301) https://github.com/OmriBaso/SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit", "creation_timestamp": "2026-08-13T19:54:12.651712Z"}, {"uuid": "8dd8edb5-003c-40e2-9323-7fa5fab4c7eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3msygctslpar2", "content": "SCCM RCE PoC (CVE-2026-47301) https://github.com/OmriBaso/SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit", "creation_timestamp": "2026-08-13T19:54:24.676142Z"}, {"uuid": "a1c0e2db-468c-4fbf-b534-e143a8b09f4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97908", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a OmriBaso\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C#\n\u2b50 Star\u6570\u91cf\uff1a 4  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-13 14:50:06\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-14T00:00:08.150333Z"}, {"uuid": "34858521-b285-4636-87e9-2b50bd91eba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqmyqlcmbo2l", "content": "CVE-2026-47301 - Configuration Manager Elevation of Privilege Vulnerability\nCVE ID : CVE-2026-47301\n \n Published : July 14, 2026, 7:17 p.m. | 13\u00a0minutes ago\n \n Description : Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate pri...", "creation_timestamp": "2026-07-14T20:01:44.684179Z"}, {"uuid": "183b5bfc-9e3d-4988-8263-977a76684629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqr75ovixc2h", "content": "\ud83d\udccc CVE-2026-47301 - Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network. https://www.cyberhub.blog/cves/CVE-2026-47301", "creation_timestamp": "2026-07-16T12:07:06.379182Z"}, {"uuid": "1f4b80d5-3605-411d-b6dd-fe91900744f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-22", "content": "", "creation_timestamp": "2026-07-16T13:51:39.037182Z"}, {"uuid": "bfe370c4-5361-4b20-aa0c-aa906aac5ec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://t.me/P0x3k_1N73LL1G3NC3/416", "content": "SCCM-CVE-2026-47301-Remote-Code-Execution\n\nExploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution.\n\nBlog: Microsoft Configuration Manager RCE 0-Day Exploit Chain (SCCM \ud835\uddd6\ud835\udde9\ud835\uddd8-\ud835\udfee\ud835\udfec\ud835\udfee\ud835\udff2-\ud835\udff0\ud835\udff3\ud835\udfef\ud835\udfec\ud835\udfed)", "creation_timestamp": "2026-08-22T21:00:04.973212Z"}, {"uuid": "135dec2e-c800-4d89-b7a0-b70858392962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "published-proof-of-concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/416", "content": "SCCM-CVE-2026-47301-Remote-Code-Execution\n\nExploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution.\n\nBlog: Microsoft Configuration Manager RCE 0-Day Exploit Chain (SCCM \ud835\uddd6\ud835\udde9\ud835\uddd8-\ud835\udfee\ud835\udfec\ud835\udfee\ud835\udff2-\ud835\udff0\ud835\udff3\ud835\udfef\ud835\udfec\ud835\udfed)", "creation_timestamp": "2026-08-23T00:00:13.242611Z"}, {"uuid": "816328d7-1b3c-495a-b03a-4fbcbe9074d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrkulfyj2t2p", "content": "\u05ea\u05e7\u05dc\u05d4 \u05e7\u05e9\u05d4 \u05d1\u05d7\u05dc\u05d5\u05e7\u05ea \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea: CVE-2026-47301 \u05d1-Microsoft Configuration Manager\n\n\n\nhttps://khesef.xyz/posts/2E3410FA-5730-479F-BBF6-EE949E912EBB", "creation_timestamp": "2026-07-26T17:07:08.559003Z"}, {"uuid": "8bb8e6d7-13af-4061-851e-4a9f72999164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrkulfwwdo2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 CVE-2026-47301 \u0432 Microsoft Configuration Manager: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A109AF0E-8C16-4690-9E4C-4AA424BD6435", "creation_timestamp": "2026-07-26T17:07:09.023561Z"}, {"uuid": "5d5d3897-8da3-4bea-92ff-7f2053296f6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://bsky.app/profile/lordman1982.bsky.social/post/3mtvheqwc7q2b", "content": "CVE-2026-47301: de una simple elevaci\u00f3n de privilegios en SCCM a ejecuci\u00f3n como SYSTEM\nwww.hackplayers.com/2026/08/cve-...", "creation_timestamp": "2026-08-25T09:00:27.366085Z"}, {"uuid": "550452b8-ac14-4fda-91f4-b83995ca8abf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47301", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/48414", "content": "SCCM-CVE-2026-47301-Remote-Code-Execution\n\nExploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution.\n\nBlog: Microsoft Configuration Manager RCE 0-Day Exploit Chain (SCCM \ud835\uddd6\ud835\udde9\ud835\uddd8-\ud835\udfee\ud835\udfec\ud835\udfee\ud835\udff2-\ud835\udff0\ud835\udff3\ud835\udfef\ud835\udfec\ud835\udfed)", "creation_timestamp": "2026-09-02T06:00:05.513904Z"}]}