Assessment
Authentication bypass by capture-replay in SQL Server allows an unauthorized attacker to disclose information over a network.
- Severity
- Important
- CVSS base score
- Not published
- Impact
- Information Disclosure
- Exploitation detected
- No known exploitation (MSRC assessment)
- Exploitability
- Exploitation Less Likely
- Publicly disclosed
- No (MSRC assessment)
- EPSS · 30-day forecast
- No EPSS score collected
- Customer action
- Required: follow the MSRC remediation guidance
More details
- Public detection template
- No Nuclei template is listed in the current collected catalog
- Component
- SQL Server
- Weakness
- CWE-294: Authentication Bypass by Capture-replay
- Issued by
- Microsoft
- Last revised
- 10 Nov 2026
Updates that fix it
0 KBsNo KB listed
No KB update is listed in the collected MSRC record. Check the MSRC advisory for product releases and other remedies.
3 affected products
- Microsoft.Data.SqlClient 6.1
- Microsoft.Data.SqlClient 7.0
- Microsoft.Data.SqlClient 7.1
Page history
Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.
Cite this versionField-level log (0)
Up to 100 recent field edits are shown; older edits may be outside retention.
No retained field changes for this selection.