← Database

CVE-2026-55002

HIGH CVSS: 8.8 Published: 2026-07-14 Modified: 2026-08-04

Description

External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network.

Affected Platforms

Microsoft Sql Server 2016Microsoft Sql Server 2019Microsoft Sql Server 2025Microsoft Sql Server 2017Microsoft Sql Server 2022

Weakness Type

CWE-73

References