CVE-2026-116930

Name of the Vulnerable Software and Affected Versions SQL Server (affected versions not specified)

Description Improper neutralization of special elements used in a command allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. This is known as command injection, where an attacker can inject malicious commands into a system through a vulnerable input.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.