CVE WATCH / VULNERABILITY DETAIL
CVE-2026-123859
HIGHCVSS 8.1NVD feed
Published 6 November 2026 · tracked since 7 November 2026
Description
When identifier escaping is disabled through a non-default configuration, the write_pandas() data-loading functionality in the Snowflake Connector for Python and the Snowflake Connector for Python (Universal Core) did not escape DataFrame column names before including them in generated SQL, which co
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog