Jul 2026: Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-54116 Published on July 14, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Access of resource using incompatible type ('type confusion') in SQL Server allows an authorized attacker to disclose information over a network.
Weakness Type
What is an Object Type Confusion Vulnerability?
The program allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
CVE-2026-54116 has been classified to as an Object Type Confusion vulnerability or weakness.
Products Associated with CVE-2026-54116
Want to know whenever a new CVE is published for Microsoft Sql Server 2025? stack.watch will email you.
Affected Versions
Microsoft SQL Server 2025 (CU 6):- Version 17.0.4060.2 and below 17.0.4060.2 is affected.
- Version 17.0.1050.2 and below 17.0.1125.2 is affected.