CVE-2026-54117
No fix known EPSS 2%CVSS 9.8
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.
Products: Microsoft SQL Server 2025 (CU 6), Microsoft SQL Server 2025 for x64-based Systems (GDR)