← Database

CVE-2026-54117

HIGH CVSS: 8.8 Published: 2026-07-14 Modified: 2026-07-22

Description

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

Affected Platforms

Microsoft Sql Server 2016Microsoft Sql Server 2019Microsoft Sql Server 2025Microsoft Sql Server 2017Microsoft Sql Server 2022

Weakness Type

CWE-502

References