CVE-2026-108065

Vendor

Microsoft

Product

SQL Server

CVSS

9.8

EPSS

0.009 (p58)

Exposure class

Database, Network management

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 35
   CVE NVD 17d ago

   SQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce [VERSION — missing]…

   SQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce [VERSION — missing] allows an unauthenticated remote attacker to read, write, and potentially execute…

   CVSS 9.8 CVE-2026-108065 Microsoft
2. 33
   Research Rapid7 17d ago

   Unauthenticated SQL Injection In Channel Software WebAlliance eCommerce

   Overview While performing continuous red teaming exercises through Rapid7’s Vector Command service, Rapid7 discovered CVE-2026-108065 , an SQL Injection vulnerability (CWE-89) in Channel Software WebAlliance eCommerce.The exploit…

   CVSS 9.8 CVE-2026-108065 Rapid7