CVE-2025-59501

Medium · 4.8

CVSS

4.8

EPSS

3.3%

Published

Oct 31, 2025

CISA due date

—

The record

Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network.

Ecosystem	Package	Introduced	Fixed