CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-55002

External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 46.2%

CVSS Severity

CVSS v3 Score 8.8

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55002

Products affected by CVE-2026-55002

Microsoft » Sql Server 2016 » Version: 13.0.6300.2

cpe:2.3:a:microsoft:sql_server_2016:13.0.6300.2
Microsoft » Sql Server 2016 » Version: 13.0.6441.1

cpe:2.3:a:microsoft:sql_server_2016:13.0.6441.1
Microsoft » Sql Server 2016 » Version: 13.0.6445.1

cpe:2.3:a:microsoft:sql_server_2016:13.0.6445.1
Microsoft » Sql Server 2016 » Version: 13.0.6455.2

cpe:2.3:a:microsoft:sql_server_2016:13.0.6455.2
Microsoft » Sql Server 2016 » Version: 13.0.6460.7

cpe:2.3:a:microsoft:sql_server_2016:13.0.6460.7
Microsoft » Sql Server 2016 » Version: 13.0.6465.1

cpe:2.3:a:microsoft:sql_server_2016:13.0.6465.1
Microsoft » Sql Server 2016 » Version: 13.0.6470.1

cpe:2.3:a:microsoft:sql_server_2016:13.0.6470.1
Microsoft » Sql Server 2016 » Version: 13.0.6475.1

cpe:2.3:a:microsoft:sql_server_2016:13.0.6475.1
Microsoft » Sql Server 2016 » Version: 13.0.6480.4

cpe:2.3:a:microsoft:sql_server_2016:13.0.6480.4
Microsoft » Sql Server 2016 » Version: 13.0.6485.1

cpe:2.3:a:microsoft:sql_server_2016:13.0.6485.1
Microsoft » Sql Server 2016 » Version: 13.0.6490.1

cpe:2.3:a:microsoft:sql_server_2016:13.0.6490.1
Microsoft » Sql Server 2016 » Version: 13.0.7000.253

cpe:2.3:a:microsoft:sql_server_2016:13.0.7000.253
Microsoft » Sql Server 2016 » Version: 13.0.7037.1

cpe:2.3:a:microsoft:sql_server_2016:13.0.7037.1
Microsoft » Sql Server 2016 » Version: 13.0.7040.1

cpe:2.3:a:microsoft:sql_server_2016:13.0.7040.1
Microsoft » Sql Server 2016 » Version: 13.0.7050.2

cpe:2.3:a:microsoft:sql_server_2016:13.0.7050.2
Microsoft » Sql Server 2016 » Version: 13.0.7055.9

cpe:2.3:a:microsoft:sql_server_2016:13.0.7055.9
Microsoft » Sql Server 2016 » Version: 13.0.7060.1

cpe:2.3:a:microsoft:sql_server_2016:13.0.7060.1
Microsoft » Sql Server 2016 » Version: 13.0.7065.1

cpe:2.3:a:microsoft:sql_server_2016:13.0.7065.1
Microsoft » Sql Server 2016 » Version: 13.0.7070.1

cpe:2.3:a:microsoft:sql_server_2016:13.0.7070.1
Microsoft » Sql Server 2016 » Version: 13.0.7075.5

cpe:2.3:a:microsoft:sql_server_2016:13.0.7075.5
Microsoft » Sql Server 2016 » Version: 13.0.7080.1

cpe:2.3:a:microsoft:sql_server_2016:13.0.7080.1
Microsoft » Sql Server 2016 » Version: 13.0.7085.1

cpe:2.3:a:microsoft:sql_server_2016:13.0.7085.1
Microsoft » Sql Server 2017 » Version: 14.0.3006.16

cpe:2.3:a:microsoft:sql_server_2017:14.0.3006.16
Microsoft » Sql Server 2017 » Version: 14.0.3008.27

cpe:2.3:a:microsoft:sql_server_2017:14.0.3008.27
Microsoft » Sql Server 2017 » Version: 14.0.3015.40

cpe:2.3:a:microsoft:sql_server_2017:14.0.3015.40
Microsoft » Sql Server 2017 » Version: 14.0.3471.2

cpe:2.3:a:microsoft:sql_server_2017:14.0.3471.2
Microsoft » Sql Server 2017 » Version: 14.0.3475.1

cpe:2.3:a:microsoft:sql_server_2017:14.0.3475.1
Microsoft » Sql Server 2017 » Version: 14.0.3485.1

cpe:2.3:a:microsoft:sql_server_2017:14.0.3485.1
Microsoft » Sql Server 2017 » Version: 14.0.3495.9

cpe:2.3:a:microsoft:sql_server_2017:14.0.3495.9
Microsoft » Sql Server 2017 » Version: 14.0.3500.1

cpe:2.3:a:microsoft:sql_server_2017:14.0.3500.1
Microsoft » Sql Server 2017 » Version: 14.0.3505.1

cpe:2.3:a:microsoft:sql_server_2017:14.0.3505.1
Microsoft » Sql Server 2017 » Version: 14.0.3515.1

cpe:2.3:a:microsoft:sql_server_2017:14.0.3515.1
Microsoft » Sql Server 2017 » Version: 14.0.3520.4

cpe:2.3:a:microsoft:sql_server_2017:14.0.3520.4
Microsoft » Sql Server 2017 » Version: 14.0.3525.1

cpe:2.3:a:microsoft:sql_server_2017:14.0.3525.1
Microsoft » Sql Server 2017 » Version: 14.0.3530.2

cpe:2.3:a:microsoft:sql_server_2017:14.0.3530.2
Microsoft » Sql Server 2022 » Version: 16.0.1000.6

cpe:2.3:a:microsoft:sql_server_2022:16.0.1000.6
Microsoft » Sql Server 2022 » Version: 16.0.1050.5

cpe:2.3:a:microsoft:sql_server_2022:16.0.1050.5
Microsoft » Sql Server 2022 » Version: 16.0.1105.1

cpe:2.3:a:microsoft:sql_server_2022:16.0.1105.1
Microsoft » Sql Server 2022 » Version: 16.0.1110.1

cpe:2.3:a:microsoft:sql_server_2022:16.0.1110.1
Microsoft » Sql Server 2022 » Version: 16.0.1115.1

cpe:2.3:a:microsoft:sql_server_2022:16.0.1115.1
Microsoft » Sql Server 2022 » Version: 16.0.1121.4

cpe:2.3:a:microsoft:sql_server_2022:16.0.1121.4
Microsoft » Sql Server 2022 » Version: 16.0.1125.1

cpe:2.3:a:microsoft:sql_server_2022:16.0.1125.1
Microsoft » Sql Server 2022 » Version: 16.0.1130.5

cpe:2.3:a:microsoft:sql_server_2022:16.0.1130.5
Microsoft » Sql Server 2022 » Version: 16.0.1135.2

cpe:2.3:a:microsoft:sql_server_2022:16.0.1135.2
Microsoft » Sql Server 2022 » Version: 16.0.1140.6

cpe:2.3:a:microsoft:sql_server_2022:16.0.1140.6
Microsoft » Sql Server 2022 » Version: 16.0.1145.1

cpe:2.3:a:microsoft:sql_server_2022:16.0.1145.1
Microsoft » Sql Server 2022 » Version: 16.0.1150.1

cpe:2.3:a:microsoft:sql_server_2022:16.0.1150.1
Microsoft » Sql Server 2022 » Version: 16.0.1160.1

cpe:2.3:a:microsoft:sql_server_2022:16.0.1160.1
Microsoft » Sql Server 2022 » Version: 16.0.1165.1

cpe:2.3:a:microsoft:sql_server_2022:16.0.1165.1
Microsoft » Sql Server 2022 » Version: 16.0.1170.5

cpe:2.3:a:microsoft:sql_server_2022:16.0.1170.5
Microsoft » Sql Server 2022 » Version: 16.0.1175.1

cpe:2.3:a:microsoft:sql_server_2022:16.0.1175.1
Microsoft » Sql Server 2022 » Version: 16.0.1180.1

cpe:2.3:a:microsoft:sql_server_2022:16.0.1180.1
Microsoft » Sql Server 2022 » Version: 16.0.4003.1

cpe:2.3:a:microsoft:sql_server_2022:16.0.4003.1
Microsoft » Sql Server 2022 » Version: 16.0.4015.1

cpe:2.3:a:microsoft:sql_server_2022:16.0.4015.1
Microsoft » Sql Server 2022 » Version: 16.0.4025.1

cpe:2.3:a:microsoft:sql_server_2022:16.0.4025.1
Microsoft » Sql Server 2022 » Version: 16.0.4035.4

cpe:2.3:a:microsoft:sql_server_2022:16.0.4035.4
Microsoft » Sql Server 2022 » Version: 16.0.4045.3

cpe:2.3:a:microsoft:sql_server_2022:16.0.4045.3
Microsoft » Sql Server 2022 » Version: 16.0.4055.4

cpe:2.3:a:microsoft:sql_server_2022:16.0.4055.4
Microsoft » Sql Server 2022 » Version: 16.0.4065.3

cpe:2.3:a:microsoft:sql_server_2022:16.0.4065.3
Microsoft » Sql Server 2022 » Version: 16.0.4075.1

cpe:2.3:a:microsoft:sql_server_2022:16.0.4075.1
Microsoft » Sql Server 2022 » Version: 16.0.4080.1

cpe:2.3:a:microsoft:sql_server_2022:16.0.4080.1
Microsoft » Sql Server 2022 » Version: 16.0.4085.2

cpe:2.3:a:microsoft:sql_server_2022:16.0.4085.2
Microsoft » Sql Server 2022 » Version: 16.0.4095.4

cpe:2.3:a:microsoft:sql_server_2022:16.0.4095.4
Microsoft » Sql Server 2022 » Version: 16.0.4100.1

cpe:2.3:a:microsoft:sql_server_2022:16.0.4100.1
Microsoft » Sql Server 2022 » Version: 16.0.4105.2

cpe:2.3:a:microsoft:sql_server_2022:16.0.4105.2
Microsoft » Sql Server 2022 » Version: 16.0.4115.5

cpe:2.3:a:microsoft:sql_server_2022:16.0.4115.5
Microsoft » Sql Server 2022 » Version: 16.0.4120.1

cpe:2.3:a:microsoft:sql_server_2022:16.0.4120.1
Microsoft » Sql Server 2022 » Version: 16.0.4125.3

cpe:2.3:a:microsoft:sql_server_2022:16.0.4125.3
Microsoft » Sql Server 2022 » Version: 16.0.4131.2

cpe:2.3:a:microsoft:sql_server_2022:16.0.4131.2
Microsoft » Sql Server 2022 » Version: 16.0.4135.4

cpe:2.3:a:microsoft:sql_server_2022:16.0.4135.4
Microsoft » Sql Server 2022 » Version: 16.0.4140.3

cpe:2.3:a:microsoft:sql_server_2022:16.0.4140.3
Microsoft » Sql Server 2022 » Version: 16.0.4150.1

cpe:2.3:a:microsoft:sql_server_2022:16.0.4150.1
Microsoft » Sql Server 2022 » Version: 16.0.4155.4

cpe:2.3:a:microsoft:sql_server_2022:16.0.4155.4
Microsoft » Sql Server 2022 » Version: 16.0.4175.1

cpe:2.3:a:microsoft:sql_server_2022:16.0.4175.1
Microsoft » Sql Server 2022 » Version: 16.0.4200.1

cpe:2.3:a:microsoft:sql_server_2022:16.0.4200.1
Microsoft » Sql Server 2022 » Version: 16.0.4210.1

cpe:2.3:a:microsoft:sql_server_2022:16.0.4210.1
Microsoft » Sql Server 2022 » Version: 16.0.4212.1

cpe:2.3:a:microsoft:sql_server_2022:16.0.4212.1
Microsoft » Sql Server 2022 » Version: 16.0.4222.2

cpe:2.3:a:microsoft:sql_server_2022:16.0.4222.2
Microsoft » Sql Server 2022 » Version: 16.0.4230.2

cpe:2.3:a:microsoft:sql_server_2022:16.0.4230.2
Microsoft » Sql Server 2022 » Version: 16.0.4240.4

cpe:2.3:a:microsoft:sql_server_2022:16.0.4240.4
Microsoft » Sql Server 2022 » Version: 16.0.4250.1

cpe:2.3:a:microsoft:sql_server_2022:16.0.4250.1
Microsoft » Sql Server 2022 » Version: 16.0.4252.3

cpe:2.3:a:microsoft:sql_server_2022:16.0.4252.3
Microsoft » Sql Server 2025 » Version: 17.0.1000.7

cpe:2.3:a:microsoft:sql_server_2025:17.0.1000.7
Microsoft » Sql Server 2025 » Version: 17.0.1050.2

cpe:2.3:a:microsoft:sql_server_2025:17.0.1050.2
Microsoft » Sql Server 2025 » Version: 17.0.1105.2

cpe:2.3:a:microsoft:sql_server_2025:17.0.1105.2
Microsoft » Sql Server 2025 » Version: 17.0.1110.1

cpe:2.3:a:microsoft:sql_server_2025:17.0.1110.1
Microsoft » Sql Server 2025 » Version: 17.0.1115.1

cpe:2.3:a:microsoft:sql_server_2025:17.0.1115.1
Microsoft » Sql Server 2025 » Version: 17.0.4006.2

cpe:2.3:a:microsoft:sql_server_2025:17.0.4006.2
Microsoft » Sql Server 2025 » Version: 17.0.4020.2

cpe:2.3:a:microsoft:sql_server_2025:17.0.4020.2
Microsoft » Sql Server 2025 » Version: 17.0.4030.1

cpe:2.3:a:microsoft:sql_server_2025:17.0.4030.1
Microsoft » Sql Server 2025 » Version: 17.0.4040.1

cpe:2.3:a:microsoft:sql_server_2025:17.0.4040.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-55002

Products

Pricing

Contact Us