{"id":"CVE-2026-84010","kind":"vulnerability","aliases":["CVE-2026-84010"],"related":[],"title":"Microsoft SQL Server: exposed dangerous function lets a signed-in user gain higher privileges","description":"Exposed dangerous method or function in SQL Server allows an authorized attacker to elevate privileges over a network.","summary":"SQL Server exposes a dangerous method or function to authorized users, so an attacker who already has an account can raise their privileges over the network. The sources give no further technical detail on the exact function or affected versions.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["database","infrastructure","microsoft","sql-server"],"not_affected_if":["unknown"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:21:24+00:00","first_seen_at":"2026-11-10T19:25:18+00:00","triaged_at":"2026-11-10T19:42:59+00:00","updated_at":"2026-11-10T19:42:59+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-10T19:42:59Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Microsoft SQL Server: exposed dangerous function lets a signed-in user gain higher privileges","impact":"high","summary":"SQL Server exposes a dangerous method or function to authorized users, so an attacker who already has an account can raise their privileges over the network. The sources give no further technical detail on the exact function or affected versions.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["sql-server","microsoft","database"],"confidence":0.4,"fix_status":"unknown","needs_auth":"yes","worst_case":"Low-privileged database user gains elevated rights over the network","analyst_note":"Find the affected SQL Server versions, the specific function, and the Microsoft fixed builds at the NVD entry and Microsoft's advisory.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Organisations running Microsoft SQL Server where an attacker already holds a valid database login could use the exposed function to gain more privileges. The sources do not list affected versions or configurations, so the exact scope is unknown.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000669,"input_tokens":4488,"output_tokens":441,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Find the affected SQL Server versions, the specific function, and the Microsoft fixed builds at the NVD entry and Microsoft's advisory.","search":"'-2026':17A,20A '-84010':18A,21A 'account':46B 'affect':66B 'allow':76C 'alreadi':43B 'attack':41B,79C 'author':37B,78C 'cve':16A,19A 'danger':5A,32B,69C 'databas':22B 'detail':60B 'elev':81C 'exact':63B 'expos':4A,30B,68C 'function':6A,35B,64B,72C 'gain':13A 'give':56B 'higher':14A 'infrastructur':23B 'let':7A 'method':33B,70C 'microsoft':1A,24B 'network':53B,85C 'privileg':15A,50B,82C 'rais':48B 'server':3A,27B,29B,75C 'sign':10A 'signed-in':9A 'sourc':55B 'sql':2A,26B,28B,74C 'sql-server':25B 'technic':59B 'user':12A,38B 'version':67B","nicknames":[],"mitigations":[],"who_affected":"Organisations running Microsoft SQL Server where an attacker already holds a valid database login could use the exposed function to gain more privileges. The sources do not list affected versions or configurations, so the exact scope is unknown.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["database","high","infrastructure","microsoft","sqlserver"],"campaign_type":null,"search_a":"'-2026':17A,20A '-84010':18A,21A 'cve':16A,19A 'danger':5A 'expos':4A 'function':6A 'gain':13A 'higher':14A 'let':7A 'microsoft':1A 'privileg':15A 'server':3A 'sign':10A 'signed-in':9A 'sql':2A 'user':12A","search_b":"'account':46B 'affect':66B 'alreadi':43B 'attack':41B 'author':37B 'danger':32B 'databas':22B 'detail':60B 'exact':63B 'expos':30B 'function':35B,64B 'give':56B 'infrastructur':23B 'method':33B 'microsoft':24B 'network':53B 'privileg':50B 'rais':48B 'server':27B,29B 'sourc':55B 'sql':26B,28B 'sql-server':25B 'technic':59B 'user':38B 'version':67B","search_c":"'allow':76C 'attack':79C 'author':78C 'danger':69C 'elev':81C 'expos':68C 'function':72C 'method':70C 'network':85C 'privileg':82C 'server':75C 'sql':74C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:21:24+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-84010","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84010","severity":null,"published_at":"2026-11-10T19:21:24+00:00","modified_at":"2026-11-10T19:21:24+00:00","first_seen_at":"2026-11-10T19:25:18+00:00","fetched_at":"2026-11-10T19:25:18+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}