PT-2026-87225 · Microsoft · Sql Server+5
CVE-2026-67370
·
Published
2026-09-08
·
Updated
2026-09-09
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
🛡️ SQL Server’s “authorized user” can potentially turn a network connection into sysadmin access. CVE-2026-67370 is a reminder that database permissions are not a security strategy—patch now.
https://t.co/kqYIHEbddp
#MicrosoftSecurity #Msrc #Cve202667370 https://t.co/yPfN0qbIFU
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sql Server
Sql Server 2017
Sql Server 2019
Sql Server 2022
Sql Server 2025
Sql Server 2025 For X64-Based Systems