CVE-2026-54116

No fix known EPSS <1%CVSS 6.5

Access of resource using incompatible type ('type confusion') in SQL Server allows an authorized attacker to disclose information over a network.

Published 2026-07-14 · CVE record · OSV

Products: Microsoft SQL Server 2025 (CU 6), Microsoft SQL Server 2025 for x64-based Systems (GDR)