---
id: "CVE-2026-118108"
page: "https://infrastack.ai/live/CVE-2026-118108"
kind: "vulnerability"
aliases: ["CVE-2026-118108"]
title: "SQL Server: improper authorization lets a logged-in user gain higher privileges"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["microsoft", "sql-server", "vendor"]
not_affected_if: []
published_at: "2026-11-10T19:19:28+00:00"
first_seen_at: "2026-11-10T19:24:47+00:00"
updated_at: "2026-11-10T19:44:46+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-118108", "first_seen_at": "2026-11-10T19:24:47+00:00"}]
exploit_sources: []
---

# SQL Server: improper authorization lets a logged-in user gain higher privileges

Link for people: https://infrastack.ai/live/CVE-2026-118108 (this .md is for agents)

SQL Server has an improper authorization flaw that lets an attacker who already has valid credentials raise their privileges over the network. The attacker would gain rights beyond what their account should allow.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:24:47+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-118108

## From the sources

Improper authorization in SQL Server allows an authorized attacker to elevate privileges over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_