Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-2026-47301

CVSS 8.8 4 detections found
View on NVD →
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.

Detection rules

Source Rule Status Updated
splunk Windows Builtin Account Name Was Changed production 2026-08-24
splunk Windows CAB File on Disk production 2026-08-24
splunk Windows SCCM Smsexec Spawned a Suspicious Child Process production 2026-08-24
splunk Windows SCCM Adsource DLL Was Planted In SMS Provider Directory production 2026-08-20