TI-2026-29145 CVE-2026-40370 · GHSA-c4mg-2cmw-c72r
SQL Server Remote Code Execution Vulnerability
Priority MEDIUM 41
External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.
KB5089900
Security Update
Fixed in
- Microsoft SQL Server 2022 for x64-based Systems (CU 24) 16.0.4252.3