The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
    (CVE-2026-77482)

  - Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a     network. (CVE-2026-77486)

  - Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a     network. (CVE-2026-78442)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
344796	Microsoft SQL Server (September 2026)	Nessus	Misc.	9/11/2026	9/14/2026	high
344798	Microsoft SQL Server (September 2026)	Nessus	Windows : Microsoft Bulletins	9/11/2026	9/14/2026	high

Detections

Analytics

Plugins Search

high

high