CVE-2019-1068: Microsoft SQL Server Remote Code Execution Vulnerability.

Microsoft SQL Server Remote Code Execution Vulnerability. Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine service account.

• CISA KEV-listed (remediation due 2026-08-29)
• EPSS 57.3% (99.1% percentile)
• CVSS 8.8 high

Related briefings

• CISA gives agencies three days to fix a Citrix bug 2026-08-26

Browse the CVE database

Read the full analysis on IntelFusions