type: cve · created: 2026-08-27 · updated: 2026-08-27 · tags: [cve, rce, kev, database] · confidence: high · severity: critical · affected_sectors: [technology, finance, government, healthcare] · au_impact: true
CVE-2019-1068 — Microsoft SQL Server Remote Code Execution
CVE-2019-1068 is a remote code execution vulnerability in Microsoft SQL Server, added to the CISA KEV Catalog on 2026-08-26 based on active exploitation. SQL Server is one of the most widely deployed relational databases across finance, government, healthcare and enterprise, so RCE in it carries broad cross-sector exposure.
Type: Remote code execution | Exploitation: Active (KEV) | Mitigation: apply Microsoft updates; restrict network exposure