← Database
CVE-2026-40370
HIGH
CVSS: 8.8
Published: 2026-05-12
Modified: 2026-06-18
Description
External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.
Affected Platforms
Microsoft Sql Server 2016Microsoft Sql Server 2019Microsoft Sql Server 2025Microsoft Sql Server 2017Microsoft Sql Server 2022
Weakness Type
CWE-73, CWE-610