MSSQL and SCCM Elevation of Privilege Vulnerabilities

Published

2026-01-15 17:00

Collected

2026-10-17 04:47

---
id: 9465
title: "MSSQL and SCCM Elevation of Privilege Vulnerabilities"
source_domain: specterops.io
source_url: "https://specterops.io/blog/2026/01/15/mssql-and-sccm-elevation-of-privilege-vulnerabilities/"
published_at: "2026-01-15T17:00:00Z"
phying_url: "https://phying.com/item/9465"
lang: en
---

# MSSQL and SCCM Elevation of Privilege Vulnerabilities

## Summary

While researching the MSSQL and SCCM permission models to build MSSQLHound and ConfigManBearPig, PowerShell scripts that collect information for the BloodHound attack path management software, I found permissions that allowed elevation of privileges to the MSSQL sysadmin server role and the SCCM Full Administrator security role.

## Intelligence Metadata

- **Sources:** specterops.io
- **Published:** 2026-01-15T17:00:00Z
- **Original:** https://specterops.io/blog/2026/01/15/mssql-and-sccm-elevation-of-privilege-vulnerabilities/
- **Phying News:** https://phying.com/item/9465