Medium severity4.8NVD Advisory· Published Oct 31, 2025· Updated Jun 17, 2026
CVE-2025-59501
CVE-2025-59501
Description
Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network.
Affected products
6- cpe:2.3:a:microsoft:configuration_manager_2403:*:*:*:*:*:*:*:*Range: <5.00.9128.1037
cpe:2.3:a:microsoft:configuration_manager_2409:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:configuration_manager_2409:*:*:*:*:*:*:*:*range: <5.00.9132.1031
- (no CPE)range: 1.0.0
- cpe:2.3:a:microsoft:configuration_manager_2503:*:*:*:*:*:*:*:*Range: <5.0.9135.1013
- Range: 1.0.0
Patches
Vulnerability mechanics
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59501nvdVendor Advisory
News mentions
0No linked articles in our index yet.