CVE-2026-65674
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
Published Oct 13, 2026 · updated Oct 13, 2026
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · Catalog
Detected
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
Oct 13, 2026 · Catalog
Updated
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
Sources
- CVE.orgCVE-2026-65674
Official CVE identifier
cve.org - FIRST EPSSCVE-2026-65674
30-day exploitation probability 0.9%
first.org - NIST NVDCVE-2026-65674
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
nvd.nist.gov