CVE-2026-55002 in SQL Server

Riassunto

di MITRE • 14/07/2026

External control of file name or path in SQL Server allows an authorized attacker to elevate privileges locally.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsabile: Microsoft
• Prenotare: 16/06/2026
• Divulgazione: 14/07/2026
• Moderazione: accettato
• Voce: VDB-378558
• CPE: pronto
• CWE: CWE-285 (confermato)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Attività: molto basso
• Settore: Transportation, Insurance, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-55002
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-55002
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-55002/