CVE-2024-26164 - Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability

Back Back to CVE browser

HIGH

Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability

Published Mar 12, 2024

8.8

HIGH

CVSS 3.1

EPSS 2.11%

Description

Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability

Affected products

Vendor Microsoft Product SQL Server backend for Django Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  <1.4.1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

SQL Server backend for Django

n/a

Version	Status	Constraints
1.0	affected	<1.4.1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (3)

https://github.com/advisories/GHSA-vmqv-47j8-gwv8
Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26164
vendor-advisoryVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-26164

Link	Providers	Tags
https://github.com/advisories/GHSA-vmqv-47j8-gwv8		Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26164		vendor-advisoryVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-26164

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Mar 12, 2024

Updated May 3, 2025

Reserved Feb 14, 2024

Link CVE-2024-26164

CISA Vulnrichment

Updated Mar 12, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-26164

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-26164

GHSA-VMQV-47J8-GWV8