CVE-2026-77483

Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.

Scoring

Severity

HIGH

CVSS base score

8.8

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CWE

CWE-1390

Published

2026-09-08

Last modified

2026-09-09

Affected products

• Microsoft Microsoft SQL Server 2017 (CU 31)
• Microsoft Microsoft SQL Server 2017 (GDR)
• Microsoft Microsoft SQL Server 2019 (CU 32)
• Microsoft Microsoft SQL Server 2019 (GDR)
• Microsoft Microsoft SQL Server 2022 (CU 26)
• Microsoft Microsoft SQL Server 2022 (GDR)
• Microsoft Microsoft SQL Server 2025 (CU8)
• Microsoft Microsoft SQL Server 2025 for x64-based Systems (GDR)

Weakness type

• CWE-1390

Related vulnerabilities

• CVE-2026-73025 — Windows iSCSI Security Feature Bypass Vulnerability
• CVE-2026-62895 — Azure Arc SQL Server Extension Elevation of Privilege Vulnerability
• CVE-2026-80219 — Hawtio-operator: hawtio-operator: oauthclient created with grantmethod auto and no secret enables oauth token theft
• CVE-2026-73819 — Ebyte NA111-M Weak Authentication
• CVE-2026-44476 — Doorkeeper OpenID Connect: Dynamic Client Registration feature creates public clients with client_secret
• CVE-2026-65098 — NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an...
• CVE-2026-68067 — Mira Hormone Monitor, Mira Android App Weak Authentication
• CVE-2026-59135 — Microsoft Windows Search Component Information Disclosure Vulnerability

Markdown version · Browse all CVEs