Unrated severityNVD Advisory· Published Mar 10, 2026· Updated Apr 14, 2026
SQL Server Elevation of Privilege Vulnerability
CVE-2026-26116
Description
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
Affected products
2- Microsoft/Microsoft SQL Server 2025 (CU 2)v5Range: 17.0.0.0
- Microsoft/Microsoft SQL Server 2025 for x64-based Systems (GDR)v5Range: 17.0.1050.2
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26116mitrevendor-advisorypatch
News mentions
0No linked articles in our index yet.