What is the CVSS score of CVE-2026-55002?

CVE-2026-55002 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Microsoft Sql Server 2016 Service Pack 3 Gdr are affected by CVE-2026-55002?

CVE-2026-55002 is a local privilege escalation in Microsoft SQL Server (versions 2016 SP3 through 2025) enabling authenticated database users to gain elevated host-level access, potentially…. A patch is available.

How to fix or mitigate CVE-2026-55002?

Within 24 hours, identify all SQL Server instances across your organization running versions 2016 SP3 through 2025 and prioritize by business criticality. Within 7 days, acquire the vendor patch from Microsoft, test it on non-production systems to validate compatibility and performance, and develop a phased deployment schedule. Within 30 days, deploy the patch to all affected instances, beginning with development and test environments before proceeding to production systems during scheduled maintenance windows.

Microsoft Sql Server 2016 Service Pack 3 Gdr CVE-2026-55002

EUVD-2026-44033 HIGH

External Control of File Name or Path (CWE-73)

2026-07-14 microsoft

GHSA-84xv-35h8-r47j

Information Disclosure Microsoft Sql Server 2016 Service Pack 3 Gdr Microsoft Sql Server 2016 Service Pack 3 Azure Connect Feature Pack Microsoft Sql Server 2017 Cu 31 Microsoft Sql Server 2017 Gdr Microsoft Sql Server 2019 Cu 32 Microsoft Sql Server 2019 Gdr Microsoft Sql Server 2022 Gdr Microsoft Sql Server 2022 For X64 Based Systems Cu 25 Microsoft Sql Server 2025 Cu 6 Microsoft Sql Server 2025 For X64 Based Systems Gdr

7.8

CVSS 3.1 · Vendor: microsoft

Severity by source

Vendor (microsoft) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

ENISA EUVD

HIGH

qualitative

Primary rating from Vendor (microsoft).

CVSS VectorVendor: microsoft

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 14, 2026 - 18:00 vuln.today

CVE Published

Jul 14, 2026 - 17:05 nvd

HIGH 7.8

DescriptionCVE.org

External control of file name or path in SQL Server allows an authorized attacker to elevate privileges locally.

AnalysisAI

Local privilege elevation in Microsoft SQL Server (2016 SP3 through 2025) allows an already-authenticated database user to gain higher privileges on the host by controlling a file name or path used by the server engine. The CVSS 3.1 base score is 7.8 with high impact to confidentiality, integrity, and availability, and Microsoft has released a patch. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Recommended ActionAI

Within 24 hours, identify all SQL Server instances across your organization running versions 2016 SP3 through 2025 and prioritize by business criticality. …

Threat intelligence, references, and detailed analysis are available after sign-in.