KEV Entry

CVE-2026-21262

Known Exploited Vulnerability Entry External Catalog

Back to Catalog View Vulnerability
Entry Details
Confirmed Exploited

CVE-2026-21262

2026-04-19 13:46 UTC

Timestamps

2026-04-19

2026-04-19

Scope

KEVIntel entry: SQL Server Elevation of Privilege Vulnerability | Affected: Microsoft / Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31), Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2019 (CU 32), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2022 (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 23), Microsoft SQL Server 2025 (CU 2), Microsoft SQL Server 2025 for x64-based Systems (GDR) | CVSS: 8.8 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True

References
  • {'id': 'CVE-2026-21262', 'url': 'https://www.cve.org/CVERecord?id=CVE-2026-21262'}
  • {'id': 'kevintel', 'url': 'https://kevintel.com/vuln/CVE-2026-21262'}

618191f0-51bf-42db-961a-95dc4d320f6e

caeb2787-0d58-4236-9039-7c86c3e566f3

2026-06-19 12:42 UTC

2026-06-19 12:42 UTC

Evidence
1
Type Source Signal Confidence Details GCVE Metadata
public_report kevintel successful_exploitation 0.70
View details 
{
  "added_date": "2026-04-19T13:46:00.775Z",
  "ahead_of_cisa_kev": null,
  "cvss_score": 8.8,
  "cvss_severity": "HIGH",
  "epss_percentile": null,
  "epss_score": null,
  "feed": "KEVIntel (kevintel.com)",
  "not_yet_in_cisa_kev": true,
  "product": "Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31), Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2019 (CU 32), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2022 (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 23), Microsoft SQL Server 2025 (CU 2), Microsoft SQL Server 2025 for x64-based Systems (GDR)",
  "title": "SQL Server Elevation of Privilege Vulnerability",
  "used_in_malware": "unknown",
  "vendor": "Microsoft"
}
 -
Export Options
JSON Object JSON API View Full Catalog