RaqibCTI
+ Request intel workspace
CVE

CVE-2019-1068

P2
Microsoft SQL Server Remote Code Execution Vulnerability
Microsoft · SQL Server
Date added (CISA)
2026-08-26
Remediation due
2026-08-29
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Associated with
Related to
  • Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaignCorrelated cluster2026-09-16

Description

Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine service account.

Source: NVD ↗ · CISA KEV Catalog ↗