Vulnerability Details CVE-2026-66819
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 52.5%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2026-66819
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3006.16
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3008.27
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3015.40
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3471.2
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3475.1
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3485.1
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3495.9
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3500.1
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3505.1
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3515.1
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3520.4
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3525.1
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3530.2
-
cpe:2.3:a:microsoft:sql_server_2017:14.0.3540.1
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4003.23
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4013.40
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4023.6
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4033.1
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4298.1
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4312.2
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4316.3
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4322.2
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4326.1
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4335.1
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4345.5
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4355.3
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4360.2
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4365.2
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4375.4
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4382.1
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4385.2
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4390.2
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4410.1
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4435.7
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4440.1
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4445.1
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4455.2
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4460.4
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4465.1
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4470.1
-
cpe:2.3:a:microsoft:sql_server_2019:15.0.4480.2
-
cpe:2.3:a:microsoft:sql_server_2022:16.0.1000.6
-
cpe:2.3:a:microsoft:sql_server_2022:16.0.1050.5
-
cpe:2.3:a:microsoft:sql_server_2022:16.0.1105.1
-
cpe:2.3:a:microsoft:sql_server_2022:16.0.1110.1
-
cpe:2.3:a:microsoft:sql_server_2022:16.0.1115.1
-
cpe:2.3:a:microsoft:sql_server_2022:16.0.1121.4
-
cpe:2.3:a:microsoft:sql_server_2022:16.0.1125.1
-
cpe:2.3:a:microsoft:sql_server_2022:16.0.1130.5
-
cpe:2.3:a:microsoft:sql_server_2022:16.0.1135.2
-
cpe:2.3:a:microsoft:sql_server_2022:16.0.1140.6
-
cpe:2.3:a:microsoft:sql_server_2022:16.0.1145.1
-
cpe:2.3:a:microsoft:sql_server_2022:16.0.1150.1
-
cpe:2.3:a:microsoft:sql_server_2022:16.0.1160.1
-
cpe:2.3:a:microsoft:sql_server_2022:16.0.1165.1
-
cpe:2.3:a:microsoft:sql_server_2022:16.0.1170.5
-
cpe:2.3:a:microsoft:sql_server_2022:16.0.1175.1
-
cpe:2.3:a:microsoft:sql_server_2022:16.0.1180.1
-
cpe:2.3:a:microsoft:sql_server_2022:16.0.1190.2
-
cpe:2.3:a:microsoft:sql_server_2025:17.0.1000.7
-
cpe:2.3:a:microsoft:sql_server_2025:17.0.1050.2
-
cpe:2.3:a:microsoft:sql_server_2025:17.0.1105.2
-
cpe:2.3:a:microsoft:sql_server_2025:17.0.1110.1
-
cpe:2.3:a:microsoft:sql_server_2025:17.0.1115.1
-
cpe:2.3:a:microsoft:sql_server_2025:17.0.1125.2
-
cpe:2.3:a:microsoft:sql_server_2025:17.0.4006.2
-
cpe:2.3:a:microsoft:sql_server_2025:17.0.4020.2
-
cpe:2.3:a:microsoft:sql_server_2025:17.0.4030.1
-
cpe:2.3:a:microsoft:sql_server_2025:17.0.4040.1
-
cpe:2.3:a:microsoft:sql_server_2025:17.0.4060.2