SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-67386

MEDIUM · CVSS 6.5 EPSS 0.71%

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

An uninitialized resource vulnerability in SQL Server enables authorized attackers to potentially disclose sensitive information over a network. Organizations using SQL Server should prioritize addressing this issue to mitigate the risk of unauthorized data exposure. This vulnerability is particularly relevant for environments where sensitive data is processed or stored.

CVE
CVE-2026-67386
Severity
MEDIUM
CVSS
6.5
EPSS
0.71%

Original NVD Description

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

Related CVEs

Other vulnerabilities affecting the same vendor(s)