VULNERABILITY INTELLIGENCE

CVE-2026-40370

CVSS score8.8 HIGH

EPSS probability0.56%

CISA KEVNot currently listed

Published2026-05-12

Last modified2026-10-26

Description

External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.