CVE-2026-6888

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Successful exploitation of the SQL injection vulnerability could allow a remote authenticated attacker to execute arbitrary commands via a specific interface, potentially enabling the attacker to access, modify, or delete sensitive information within the database.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
May 13, 2026
Last modified
Jun 17, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-688808.0Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.CVE-2026-688815.5Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.CVE-2026-688838.5Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2026-688847.0Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-688857.8Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.CVE-2026-688865.5Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally.CVE-2026-688877.5Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network.CVE-2026-688887.8Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.CVE-2026-688897.1Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.CVE-2026-688907.8Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.CVE-2026-688914.7Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.CVE-2026-688927.8Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVE-2026-6888: High severity, CVSS 7.2 | Vulnix