Ghostwire

CVE-2026-54118: Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

HIGH CVSS 8.8 Exploit Available

Published: July 14, 2026 | Last Modified: July 15, 2026

Description

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

References