CVE-2026-55002

HIGH

External control of file name or path in SQL Server allows an authorized attacker to elevate privileges locally.

StatusAwaiting Analysis

설명

External control of file name or path in SQL Server allows an authorized attacker to elevate privileges locally.

Score Summary

CVSS Score: 7.8
Version: 3.1
VPI: 78
Why this VPI (explainable, experimental)
VPI breakdown
Impact 78.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 78.00
VPI formula vpi-v1
EPSS: 0.2%
(상위 15.2%)
Attack Vector: Local Access
Low Complexity
Low Privileges
No User Interaction
Scope Unchanged
High Confidentiality Impact
High Integrity Impact
High Availability Impact

Details

CWE Weakness Classification

References (1)

Impact	78.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	78.00