Microsoft Sql Server 2025 Cu 4

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-40370 HIGH POC PATCH Exploit Unlikely This Week

External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.

Information Disclosure Microsoft Sql Server 2016 Service Pack 3 Gdr Microsoft Sql Server 2016 Service Pack 3 Azure Connect Feature Pack Microsoft Sql Server 2017 Cu 31 Microsoft Sql Server 2017 Gdr +6

NVD VulDB GitHub

CVSS 3.1

8.8

EPSS

0.1%

CVE-2026-40370

EPSS 0% CVSS 8.8

HIGH POC PATCH Exploit Unlikely This Week

External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.

Information Disclosure Microsoft Sql Server 2016 Service Pack 3 Gdr Microsoft Sql Server 2016 Service Pack 3 Azure Connect Feature Pack +8

NVD VulDB GitHub