CVE-2026-54118

CriticalCVSS 9.8

Published: 14/07/2026(UTC)Updated: 20/08/2026(UTC)Translated: 20/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.29%

68th percentile - higher than 68% of all known CVEs

A vulnerability in SQL Server allows an unauthorized attacker to execute code over a network through deserialization of untrusted data.

An attacker can remotely execute code, potentially leading to full control of the database server and data compromise.

Apply available security patches for SQL Server and restrict network access to the service.

Original NVD description (English source)

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.