CVE-2026-20967

Microsoft · Published March 10, 2026

8.8

CVSS v3.1

HIGH

Patch availableGet patch

Description

System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability. Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network.

Affected Products

System Center Operations Manager 2019
System Center Operations Manager 2022
System Center Operations Manager 2025

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C