{"id":"CVE-2026-118115","kind":"vulnerability","aliases":["CVE-2026-118115"],"related":[],"title":"Microsoft SQL Server: SQL injection lets an authorized user gain higher privileges","description":"Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.","summary":"Microsoft SQL Server mishandles special characters in SQL commands, a classic SQL injection flaw. An attacker who already has a valid account can use it over the network to elevate their privileges.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["database","microsoft","sql-server","vendor"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:19:30+00:00","first_seen_at":"2026-11-10T19:24:48+00:00","triaged_at":"2026-11-10T19:44:45+00:00","updated_at":"2026-11-10T19:44:45+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-10T19:44:45Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Microsoft SQL Server: SQL injection lets an authorized user gain higher privileges","impact":"high","summary":"Microsoft SQL Server mishandles special characters in SQL commands, a classic SQL injection flaw. An attacker who already has a valid account can use it over the network to elevate their privileges.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["sql-server","microsoft","database"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"authorized user gains elevated database privileges over the network","analyst_note":"Find affected SQL Server versions, the fixed builds and the Microsoft security update guide entry for CVE-2026-118115 at https://nvd.nist.gov/vuln/detail/CVE-2026-118115.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Organizations running Microsoft SQL Server where users hold valid database accounts reachable over the network. The sources do not list affected versions or configuration details, so exposure cannot be confirmed from them.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000672,"input_tokens":4499,"output_tokens":444,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Find affected SQL Server versions, the fixed builds and the Microsoft security update guide entry for CVE-2026-118115 at https://nvd.nist.gov/vuln/detail/CVE-2026-118115.","search":"'-118115':15A,18A '-2026':14A,17A 'account':46B 'allow':72C 'alreadi':42B 'attack':40B,75C 'author':8A,74C 'charact':30B 'classic':35B 'command':33B,66C 'cve':13A,16A 'databas':19B 'element':61C 'elev':54B,77C 'flaw':38B 'gain':10A 'higher':11A 'improp':57C 'inject':5A,37B,68C 'let':6A 'microsoft':1A,20B,25B 'mishandl':28B 'network':52B,81C 'neutral':58C 'privileg':12A,56B,78C 'server':3A,23B,27B,71C 'special':29B,60C 'sql':2A,4A,22B,26B,32B,36B,65C,67C,70C 'sql-server':21B 'use':48B,62C 'user':9A 'valid':45B 'vendor':24B","nicknames":[],"mitigations":[],"who_affected":"Organizations running Microsoft SQL Server where users hold valid database accounts reachable over the network. The sources do not list affected versions or configuration details, so exposure cannot be confirmed from them.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["database","high","microsoft","sqlserver","vendor"],"campaign_type":null,"search_a":"'-118115':15A,18A '-2026':14A,17A 'author':8A 'cve':13A,16A 'gain':10A 'higher':11A 'inject':5A 'let':6A 'microsoft':1A 'privileg':12A 'server':3A 'sql':2A,4A 'user':9A","search_b":"'account':46B 'alreadi':42B 'attack':40B 'charact':30B 'classic':35B 'command':33B 'databas':19B 'elev':54B 'flaw':38B 'inject':37B 'microsoft':20B,25B 'mishandl':28B 'network':52B 'privileg':56B 'server':23B,27B 'special':29B 'sql':22B,26B,32B,36B 'sql-server':21B 'use':48B 'valid':45B 'vendor':24B","search_c":"'allow':72C 'attack':75C 'author':74C 'command':66C 'element':61C 'elev':77C 'improp':57C 'inject':68C 'network':81C 'neutral':58C 'privileg':78C 'server':71C 'special':60C 'sql':65C,67C,70C 'use':62C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:19:30+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118115","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118115","severity":null,"published_at":"2026-11-10T19:19:30+00:00","modified_at":"2026-11-10T19:19:30+00:00","first_seen_at":"2026-11-10T19:24:48+00:00","fetched_at":"2026-11-10T19:24:48+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}