← Database

CVE-2026-20803

HIGH CVSS: 7.2 Published: 2026-01-13 Modified: 2026-07-30

Description

Missing authentication for critical function in SQL Server allows an authorized attacker to elevate privileges over a network.

Affected Platforms

Microsoft Sql Server 2025Microsoft Sql Server 2022

Weakness Type

CWE-306

References