SecBoard
Zurück zur CVE-Übersicht

CVE-2026-32176

MEDIUM(6.7)

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Risk Signal Score17/100 — NIEDRIG
  • CVSS 6.7 — Mittel

EPSS-Score

0%

Exploit-Wahrscheinlichkeit (30 Tage)

CVSS Score

6.7

Technische Schwere

Beschreibung

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.

Referenzen