CVE-2026-94520
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.
Published Oct 13, 2026 · updated Oct 13, 2026
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · Catalog
Detected
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.
Oct 13, 2026 · Catalog
Updated
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.
Sources
- CVE.orgCVE-2026-94520
Official CVE identifier
cve.org - NIST NVDCVE-2026-94520
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.
nvd.nist.gov