EUVD-2026-73180
GHSA-fm4w-j23h-7p7j
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Low-privilege authenticated network exploitation of a symlink flaw in SQL Server file operations; full C/I/A impact reflects post-escalation OS-level control on the host.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
4DescriptionCVE.org
Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network.
AnalysisAI
Privilege escalation in Microsoft SQL Server 2017 through 2025 allows any low-privileged authenticated database user to exploit improper symbolic link resolution during SQL Server file operations to gain high-level control over the host system across the network. The root cause is CWE-59 (link following): SQL Server resolves file system links without validating the resolved path, enabling a low-privilege login to redirect the high-privilege SQL Server service account into accessing or overwriting attacker-controlled targets. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must possess a valid, authenticated low-privilege SQL Server login (PR:L per CVSS) and network connectivity to the SQL Server instance (AV:N). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 8.8 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) reflects a realistic and serious threat profile: network-accessible exploitation requiring only a valid low-privilege SQL Server login, no user interaction, and low attack complexity, yielding full confidentiality, integrity, and availability impact after privilege escalation. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor-released patches via the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67368. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify and catalog all SQL Server 2017, 2019, 2022, and 2025 instances in the environment and disable non-essential database user accounts pending remediation. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-59 – Improper Link Resolution Before File Access
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today