Microsoft SCCM/ConfigMgr AdminService UploadExtensionInChunks lacks this.CheckAccess(Guid.Empty, 1024), allowing any authenticated AD domain user (no SCCM role) to POST chunked .cab console extensions. This can feed downstream cab extraction and extension loading paths and enable site server compromise. Patch deployed by Microsoft by 2026-07-14; apply vendor updates.