CVE-2026-54118Patch(microsoft / sql_server_2016)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch microsoft sql_server_2016 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

microsoft CVEs Back to dashboard

1.0/ 10 priority

Sources & remediation

Patch / fix

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54118

Weakness type (CWE)

CWE-502

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

sql_server_2016
sql_server_2017
sql_server_2019
sql_server_2022

Threat summary

Patch or workaround signal is available
3 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 3 signals
Technical details provided in 3 signals
Peaked 1d ago at 2 mentions (2026-07-20); latest day: 1
3 total mentions across 2 days

Affected systems

Vendors

microsoft

Products

sql_server_2016sql_server_2017sql_server_2019sql_server_2022sql_server_2025

Deep dive

Activity timeline3 mentions / 2d

Signal classification1 categories

Patch

3100.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-20	2	Patch2
2026-08-15	1	Patch1

Full discourse3 posts

IntegSec@integ_sec65d
Patch
CVE-2026-54118: Microsoft SQL Server Remote Code Execution Bug: What It Means for Your Business and How to Respond https://hubs.li/Q04t79vP0
Post summary
The article serves as a security advisory outlining the business impact of a Remote Code Execution flaw in Microsoft SQL Server and recommends remediation steps such as patching or applying workarounds.
0000037
32 followersView on X
Doctor Kloud@doctorkloud91d
Patch
#CVE-2026-54118 : SQL Server 2016 SP3 Azure Connect Feature Pack exposé à un déni de service. Patch KB5102339 disponible maintenant. Si vous utilisez encore SQL 2016 SP3 avec le Feature Pack Azure Connect, c'est à corriger sans délai. https://techcommunity.microsoft.com/t5/sql-server-blog/security-update-for-sql-server-2016-sp3-azure-connect-feature/ba-p/4537074
Post summary
CVE‑2026‑54118 is a denial‑of‑service vulnerability in SQL Server 2016 SP3 Azure Connect Feature Pack, and Microsoft has released patch KB5102339 that users should apply immediately.
0000032
23 followersView on X
Doctor Kloud@doctorkloud91d
Patch
SQL Server 2017 RTM reçoit un correctif GDR pour une faille DoS critique. #CVE-2026-54118 Denial of Service sur le moteur SQL : un attaquant peut rendre votre instance indisponible sans authentification préalable. Patch disponible via Microsoft Download Center et Update Catalog. KB5102338 à déployer sans délai si vous êtes encore sur RTM. https://techcommunity.microsoft.com/t5/sql-server-blog/security-update-for-sql-server-2017-rtm/ba-p/4537079
Post summary
The post announces a critical DoS vulnerability (CVE‑2026‑54118) in SQL Server 2017 RTM and urges immediate deployment of the KB5102338 patch.
0000052
23 followersView on X

CPE platform detail5 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

5 of 5 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	sql_server_2016	-	-	x64
App	microsoft	sql_server_2017	-	-	x64
App	microsoft	sql_server_2019	-	-	x64
App	microsoft	sql_server_2022	-	-	x64
App	microsoft	sql_server_2025	-	-	x64

Explore more

Back to dashboard microsoft CVEs sql_server_2016 vulnerabilities