mirror of
https://github.com/OmriBaso/SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit
synced 2026-08-14 10:52:25 +00:00
Omri Baso
9 lines
489 B
XML
9 lines
489 B
XML
<?xml version="1.0" encoding="utf-8"?>
|
|
<SMS_Roles>
|
|
<SMS_Role CopiedFromID="SMS0002R" RoleName="RCERole" RoleDescription="Minimum role to exploit the UploadExtension endpoint (the RBAC-checked variant). Grants Create on SMS_ConsoleExtensionData (ObjectTypeID 230) — enough for ValidateAndInsert to run, which triggers the CabSlip extraction chain as SYSTEM.">
|
|
<Operations>
|
|
<Operation GrantedOperations="1025" ObjectTypeID="230" />
|
|
</Operations>
|
|
</SMS_Role>
|
|
</SMS_Roles>
|