CISA Warns of Actively Exploited Microsoft SQL Server RCE Vulnerability

**CVE-2019-1068 (Microsoft SQL Server RCE) added to CISA KEV:** CISA added this remote code execution vulnerability to its Known Exploited Vulnerabilities Catalog on August 26, 2026 with a remediation deadline of August 29, 2026 under BOD 26-04, citing evidence of active exploitation; the advisory outlines impact (arbitrary code execution, data theft, persistence, lateral movement), directs organizations to apply Microsoft’s updates or mitigations, and mandates forensic triage and incident-hunting alongside patching.