GO-2026-5979Published
Anyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Mode
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-50006 · Microsoft / collected KEV context
cve-program · CVE-2026-50006
- https://github.com/julien040/anyquery/security/advisories/GHSA-xrcf-6jh3-ggvx
- https://github.com/julien040/anyquery/commit/27f84fc168310455eaf81ec4ba87eed20298670c
- https://github.com/julien040/anyquery/releases/tag/0.4.5
euvd · EUVD-2026-77809
- https://github.com/julien040/anyquery/security/advisories/GHSA-xrcf-6jh3-ggvx
- https://github.com/julien040/anyquery/commit/27f84fc168310455eaf81ec4ba87eed20298670c
- https://github.com/julien040/anyquery/releases/tag/0.4.5
nvd · CVE-2026-50006
- https://github.com/julien040/anyquery/commit/27f84fc168310455eaf81ec4ba87eed20298670c
- https://github.com/julien040/anyquery/releases/tag/0.4.5
- https://github.com/julien040/anyquery/security/advisories/GHSA-xrcf-6jh3-ggvx
osv · GHSA-xrcf-6jh3-ggvx
- https://github.com/julien040/anyquery/security/advisories/GHSA-xrcf-6jh3-ggvx
- https://github.com/julien040/anyquery
- https://github.com/julien040/anyquery/releases/tag/0.4.5
osv · GO-2026-5979
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.