Microsoft Configuration Manager SQL Injection Vulnerability

Microsoft Configuration Manager

Microsoft Configuration Manager contains an SQL injection vulnerability. An unauthenticated attacker could exploit this vulnerability by sending specially crafted requests to the target environment which are processed in an unsafe manner enabling the attacker to execute commands on the server and/or underlying database. Added to CISA KEV on 2026-02-12 (federal deadline 2026-03-05).

First seen: 12 Feb 2026
Last update: 12 Feb 2026, 12:00 UTC
Identifiers: CVE-2024-43468
Source: CISA KEV

Check this repository for exposure to one security incident from pwned.coffee. Report first, change nothing until I say so.

## Microsoft Configuration Manager SQL Injection Vulnerability
Severity: high, exploited in the wild. Patch status: patched.
Affected: Microsoft Configuration Manager
Ids: CVE-2024-43468

Microsoft Configuration Manager contains an SQL injection vulnerability. An unauthenticated attacker could exploit this vulnerability by sending specially crafted requests to the target environment which are processed in an unsafe manner enabling the attacker to execute commands on the server and/or underlying database. Added to CISA KEV on 2026-02-12 (federal deadline 2026-03-05).

## Steps
1. Search the repo, its CI and infra config for Microsoft Configuration Manager. If present, report the version in use and whether it's affected.

## Report
A table: file, product or package, version in use, affected yes/no, exact fix. Then anything a human has to check outside the repo.

If you have the pwned.coffee MCP server (https://pwned.coffee/mcp), call lookup_cve("CVE-2024-43468") for the latest, and check_repo with this repo's lockfiles, Dockerfiles and workflows for a full receipt.
Sources: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43468 https://nvd.nist.gov/vuln/detail/CVE-2024-43468
https://pwned.coffee/i/microsoft-configuration-manager-sql-injection-vulnerabil-cve-2024-43468

Sources

Totalone hot coffee