Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-54117

No fix known EPSS 2%CVSS 9.8

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

Published 2026-07-14 · CVE record · OSV

Products: Microsoft SQL Server 2025 (CU 6), Microsoft SQL Server 2025 for x64-based Systems (GDR)