Episode Details
Back to Episodes![Patch [FIX] Tuesday – April 2026 [Double Feature: SQL Another Day + XSS Never Dies], E30](https://img.transistorcdn.com/sNyRAZjMTQmnfJxnA1obnBHOOmJHkJIVtGF0s0Mfjis/rs:fill:0:0:1/w:1400/h:1400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS85MWM1/MWJmYmVkNDUyZjAz/ZWI3ZjEwOTdmZmZh/YWI1Ni5wbmc.jpg)
Patch [FIX] Tuesday – April 2026 [Double Feature: SQL Another Day + XSS Never Dies], E30
Episode 30
Published 3 months ago
Description
This month's Patch Tuesday drops a SQL Server elevation of privilege that hands attackers sysadmin access and an actively exploited SharePoint XSS flaw that requires no authentication.
SQL injection in the database engine. Cross-site scripting. In 2026...?
Ryan and Mat break down how these attacks work, what to watch for, and why these "classic" vulnerability classes refuse to stay dead.
Also covered: 80 Edge and Chromium fixes released this month, and a recurring reminder about Secure Boot certificates you can't afford to ignore this year.