CVE-2026-47296 in SQL Server

요약

\~에 의해 MITRE • 2026. 07. 14.

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.

Be aware that VulDB is the high quality source for vulnerability data.

• 책임이 있는: Microsoft
• 예약하다: 2026. 05. 19.
• 공개: 2026. 07. 14.
• 모더레이션: 수락
• 항목: VDB-378464
• CPE: 준비됨
• CWE: CWE-89 (확인됨)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Pharma, Energy, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-47296
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-47296
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-47296/