Patch [FIX] Tuesday – April 2026 [Double Feature: SQL Another Day + XSS Never Dies], E30

About this episode

Ryan and Mat discuss the latest vulnerabilities from Patch Tuesday, including a SQL Server flaw and a SharePoint XSS issue.

This month's Patch Tuesday drops a SQL Server elevation of privilege that hands attackers sysadmin access and an actively exploited SharePoint XSS flaw that requires no authentication. SQL injection in the database engine. Cross-site scripting. In 2026...? Ryan and Mat break down how these attacks work, what to watch for, and why these "classic" vulnerability classes refuse to stay dead. Also covered: 80 Edge and Chromium fixes released this month, and a recurring reminder about Secure Boot certificates you can't afford to ignore this year.

People in this episode

Hosts: Ryan, Mat

Topics covered

• cybersecurity
• vulnerabilities
• SQL injection
• cross-site scripting
• software updates
• technology news

Keywords

• SQL Server
• SharePoint
• XSS
• cybersecurity
• Patch Tuesday
• vulnerabilities
• software updates

Mentioned in this episode

Organizations: SQL Server, SharePoint

More episodes of Autonomous IT

• Product Talk – CISA's BOD 26-04 Directive Explained, E26 · June 11, 2026 · 27 min
• Patch [FIX] Tuesday – [Nothing Weaponized, Everything Exposed], E33 · June 9, 2026 · 24 min
• Patch [FIX] Tuesday – [AI Hits the Hat Trick], Ep. 32 · May 12, 2026 · 34 min
• Patch [FIX] Tuesday – [Emergency Episode: DirtyFrag Exploit Before Patch], Ep. 31 · May 8, 2026 · 11 min
• Autonomous IT, Live! The Math of Modern Attacks, E07 · April 28, 2026 · 33 min
• Secure IT – Claude Mythos: AI Vulnerability Hype vs. Evidence, E23 · April 23, 2026 · 8 min