CVE-2026-94520

Published: Ott 13, 2026 Last Modified: Ott 14, 2026

ExploitDB:

Other exploit source:

Google Dorks:

MEDIUM 4,9

Source: [email protected]

Attack Vector: network

Attack Complexity: low

Privileges Required: high

User Interaction: none

Scope: unchanged

Confidentiality: none

Integrity: none

Availability: high

AI Translation Available

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.

134

Draft

Abstraction: Base Structure: Simple

Security Scopes Affected:

Confidentiality Integrity Availability

Potential Impacts:

Read Memory Modify Memory Execute Unauthorized Code Or Commands

Languages: Not Language-Specific, C, C++, Perl

Likelihood of Exploit: High

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94520