Posts

SQL SERVER & SECURITY: What Is an XXE Attack and Why Should SQL Server DBAs Care?

Image
Before we dive into today's topic, if you missed my previous post you can take a look at SQL SERVER 2025 CU5: Bug Reference 5090650, fixes issue in which an EntryPointNotFoundException for GetNumaNodeProcessorMask2 . 👉 If you found this deep-dive helpful, feel free to check out the ads—your support helps me keep creating high-quality SQL Server content for the community. 💣 What Is an XXE Attack and Why Should SQL Server DBAs Care? XML vulnerabilities are not just a web developer problem anymore. XXE attacks can directly impact SQL Server environments, SSIS packages, SSRS reports, and XML parsing workflows. ⚡ SQL Server Security 🧠 XML Parser Internals 🚀 SSIS & SSRS Risks 💣 XXE Vulnerability ⚡ The Hook In this post, I’ll show you exactly what an XXE (XML External Entity) attack is, why it still matters today, and how it can directly affect SQL Server environments through SSIS, XML processing, and SSRS. If ...

SQL SERVER 2025 CU5: Bug Reference 5090650, fixes issue in which an EntryPointNotFoundException for GetNumaNodeProcessorMask2

Image
Before we dive into today's topic, if you missed my previous post you can take a look at SQL SERVER 2025 Optional Parameter Plan Optimization (OPPO) . 👉 If you found this deep-dive helpful, feel free to check out the ads—your support helps me keep creating high-quality SQL Server content for the community. SQL Server 2025 CU5 fixes EntryPointNotFoundException for GetNumaNodeProcessorMask2 💣 SQL Server setup crashes on older Windows versions? ⚡ CU5 fixes a nasty EntryPointNotFoundException tied to NUMA APIs and legacy operating systems. 🧠 TL;DR BOX ✔️ SQL Server 2025 CU5 fixes EntryPointNotFoundException for GetNumaNodeProcessorMask2 ⚡ ✔️ The issue occurs during SQL Server setup on unsupported or older Windows operating systems 💣 ✔️ The root cause is a missing Windows Kernel32 NUMA API function 🔍 ✔️ You can detect the problem immediately using a simple PowerShell API test 🧪 ⚡ The Hook In this post, I’ll show you why SQL Server 2025 CU5 fixes...

SQL SERVER 2025 Optional parameter plan optimization (OPPO) What is and benchmarks. Internal part 1 series

Image
Before we dive into today's topic, if you missed my previous post you can take a look at SQL SERVER 2025 CU5 (Cumulative Update 5) Is OUT! A Hot Take on the New Features for DBAs 👉 If you found this deep-dive helpful, feel free to check out the ads—your support helps me keep creating high-quality SQL Server content for the community. SQL SERVER 2025 Optional Parameter Plan Optimization (OPPO) What It Is and Benchmarks — Internal Part 1 Series ⚡ SQL Server 2025 finally attacks one of the oldest performance killers: optional parameter queries and unstable execution plans. 🧠 In this post you will learn how OPPO works internally, why it matters for parameter-sensitive workloads, and how to benchmark it yourself with real T-SQL tests. 🧠 TL;DR BOX ✔️ SQL Server 2025 OPPO automatically creates multiple execution plan variants for optional parameter queries ⚡ ✔️ OPPO is part of Intelligent Query Processing and reduces parameter-sensitive plan issues 💣 ✔...

SQL SERVER 2025 CU5 (Cumulative Update 5) Is OUT! A Hot Take on the New Features for DBAs

Before we dive into today's topic, if you missed my previous post you can take a look at Check SQL Server Plan Cache Pollution (III) in 45 Seconds, The "45 Seconds DBA Series" | Part 24 . 👉 If you found this deep-dive helpful, feel free to check out the ads—your support helps me keep creating high-quality SQL Server content for the community. SQL SERVER 2025 CU5 (Cumulative Update 5) Is OUT! A Hot Take on the New Features for DBAs ⚡ Critical fixes. Security patches. In-Memory OLTP improvements. Full-Text Search upgrades. This CU is not just maintenance — it directly impacts performance stability and production reliability. In this post, I’ll show you what really matters inside SQL Server 2025 CU5, why some fixes are potentially production-saving, and what every DBA should immediately validate after patching. ⚡ We will also see practical T-SQL examples you ...