Microsoft Azure SQL Database
6 CVEs affecting Microsoft Azure SQL Database. Latest disclosed: 2026-08-21. Critical: 5, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-69502 | Critical | 10.0 | 2026-08-21 | Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-56162 | Critical | 10.0 | 2026-08-07 | Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-68789 | Critical | 9.9 | 2026-08-20 | Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges… |
CVE-2026-68782 | Critical | 9.9 | 2026-08-20 | Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges… |
CVE-2026-66309 | Critical | 9.1 | 2026-08-20 | Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network. |
CVE-2026-63522 | High | 7.8 | 2026-08-11 | Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally. |