Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
【重大】SQL ServerのRCEがCVSS 9.8へ、7月更新を確認 https://www.cybernote.click/2026/08/24/microsoft-sql-server-cve-2026-54117-rce-update/ #IT #Security #cybersecurity
Post summary
The post announces a critical RCE in Microsoft SQL Server (CVE‑2026‑54117), noting its CVSS score of 9.8 and a vendor update expected in July.
🚨 SQL Server 2025’s CVE-2026-54117 turns authorized access into potential RCE—CVSS 8.8, low complexity. Patch to 17.0.4060.2 before “some access” becomes “full incident.” https://windowsforum.com/threads/cve-2026-54117-patch-sql-server-2025-rce-at-17-0-4060-2.438243/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #Cybersecurity #RemoteCodeExecution #SqlServer2025 #Cve202654117 https://t.co/YRox5fgVCg
Post summary
The post announces CVE-2026-54117 in SQL Server 2025, describing a remote code execution flaw with CVSS 8.8 and low complexity, and advises applying patch 17.0.4060.2.
5 of 5 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | sql_server_2016 | - | - | x64 |
| App | microsoft | sql_server_2017 | - | - | x64 |
| App | microsoft | sql_server_2019 | - | - | x64 |
| App | microsoft | sql_server_2022 | - | - | x64 |
| App | microsoft | sql_server_2025 | - | - | x64 |