CVE-2026-88075

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network...

CVE-2026-70266

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-70049

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network...

CVE-2026-103572

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

EUVD-2026-100146

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network...

CVE-2026-88075

The Microsoft Configuration Manager is susceptible to an SQL injection vulnerability (CWE-89) due to the improper neutralization of special elements used in an SQL command. An authorized attacker can exploit this flaw over a network to elevate privileges . Microsoft has released updates to addres...

EUVD-2026-99742

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network...

CVE-2026-70049

A SQL injection vulnerability exists in Microsoft Configuration Manager due to the improper neutralization of special elements used in an SQL command. This flaw allows an authorized attacker to elevate privileges over an adjacent network. The vulnerability is assigned a High base severity score. ...

CVE-2026-70266

A SQL injection vulnerability exists in Microsoft Office SharePoint due to the improper neutralization of special elements used in an SQL command. This flaw allows an authorized attacker to elevate privileges over a network. Microsoft has released updates to address this issue, and users are enco...

EUVD-2026-99714

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

EUVD-2026-99027

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

CVE-2026-103572

A code injection vulnerability exists in Visual Studio Tools for Applications and SQL Server Management Studio . Due to improper control of code generation, an unauthorized attacker can execute arbitrary code over a network. This vulnerability has a CVSS 3.1 score of 8.8 and is reported to have a...

Vulnerabilities in Microsoft SQL Server

Microsoft has identified vulnerabilities in SQL Server. Malicious actors could exploit these vulnerabilities to cause a denial-of-service attack, gain excessive privileges, execute arbitrary code, and potentially access sensitive data. Microsoft has provided updates that address these...

CVE-2026-23707

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability CWE-89 vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud...

CVE-2026-23705

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability CWE-89 vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.6, FortiAnalyzer 7.2.0 through 7.2.13, FortiManager 7.4.0 through 7.4.6, FortiManager 7.2 all...

CVE-2026-23706

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability CWE-89 vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.1 through 7.4.6, FortiAnalyzer Cloud 7.6.2, FortiAnalyzer Cloud 7.4.1 through 7.4.6, FortiAnalyzer Cloud 7.2.1...

CVE-2025-57739

An improper neutralization of special elements used in an SQL Command "SQL Injection" vulnerability CWE-89 vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5, FortiMail 7.2.0 through 7.2.8 allows an authenticated attacker to execute unauthorized code or command...

CVE-2025-46773

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability CWE-89 vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud...

cybersec-ranch

🤠 CyberSec Ranch — Cybersecurity Training & CTF Lab Suite...

CVE-2026-23706

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability CWE-89 vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.1 through 7.4.6, FortiAnalyzer Cloud 7.6.2, FortiAnalyzer Cloud 7.4.1 through 7.4.6, FortiAnalyzer Cloud 7.2.1...