9.9
Critical
CVE-2026-68782 Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an…
Description
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Azure SQL Database | Versions not published |
References
- Azure SQL Database Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Azure SQL Database
The 6 CVEs of Azure SQL Database →
CVE-2026-69502
Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a…
10.0
Critical
CVE-2026-66309
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network
9.1
Critical
CVE-2026-68789
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an…
9.9
Critical
CVE-2026-63522
Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate…
7.8
High