What is the CVSS score of CVE-2026-20967?

CVE-2026-20967 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of System Center Operations Manager are affected by CVE-2026-20967?

A high-severity privilege escalation vulnerability in System Center Operations Manager could allow authorized users to gain unauthorized administrative access across your infrastructure.. A patch is available.

How to fix or mitigate CVE-2026-20967?

Within 24 hours: Inventory all System Center Operations Manager instances and document authorized users with network access; enable enhanced logging for authentication and privilege changes. Within 7 days: Implement network segmentation to restrict SCOM access to trusted administrative networks only; conduct access review to remove unnecessary user permissions and enforce principle of least privilege. Within 30 days: Establish daily monitoring for suspicious privilege escalation attempts; develop incident response plan specific to SCOM compromise; monitor vendor advisories for patch availability and test in non-production environment immediately upon release.

System Center Operations Manager CVE-2026-20967

HIGH

Improper Input Validation (CWE-20)

2026-03-10 secure@microsoft.com

Information Disclosure System Center Operations Manager

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Mar 10, 2026 - 18:18 nvd

HIGH 8.8

DescriptionCVE.org

Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network.

AnalysisAI

Privilege escalation in System Center Operations Manager via improper input validation enables authenticated network-based attackers to gain elevated system permissions. An attacker with valid credentials can exploit this weakness to compromise administrative access without user interaction. No patch is currently available for this high-severity vulnerability affecting System Center Operations Manager deployments.

Technical ContextAI

Classified as CWE-20 (Improper Input Validation). Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network.