SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-67368

HIGH · CVSS 8.8 EPSS 0.70%

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

An improper link resolution vulnerability in SQL Server allows authorized attackers to exploit link following mechanisms, potentially leading to privilege escalation over a network. This high-severity issue (CVSS 8.8) poses a significant risk to organizations using SQL Server, particularly those with sensitive data or critical applications. Database administrators and security teams should prioritize patching and mitigating this vulnerability to safeguard against potential exploitation.

CVE
CVE-2026-67368
Severity
HIGH
CVSS
8.8
EPSS
0.70%

Original NVD Description

Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network.

Related CVEs

Other vulnerabilities affecting the same vendor(s)