CVE-2026-66309 Azure SQL Database Elevation of Privilege Vulnerability

...

CVE-2026-66309

CVE-2026-66309 is a Critical (CVSS 9.1) elevation-of-privilege flaw in Azure SQL Database; an authenticated, high-privilege attacker can escalate privileges over the network, affecting confidentiality, integrity, and availability. No affected versions, root cause, or patch details are provided in...

CVE-2026-66309 Azure SQL Database Elevation of Privilege Vulnerability

...

CVE-2026-68789

CVE-2026-68789 is a SQL injection vulnerability in Azure SQL Database that allows an authorized attacker to elevate privileges over a network. The vulnerability is rated CVSS 9.9 (CRITICAL) with a scope change, indicating high impact on confidentiality, integrity, and availability. CISA's SSVC as...

CVE-2026-68789 Azure SQL Database Elevation of Privilege Vulnerability

...

CVE-2026-68789 Azure SQL Database Elevation of Privilege Vulnerability

...

Azure SQL Database Elevation of Privilege Vulnerability

Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network...

Azure SQL Database Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...

Azure SQL Database Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...

Azure SQL Database Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-66309: Improper Access Control

Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network...

PT-2026-79207

Name of the Vulnerable Software and Affected Versions Azure SQL Database affected versions not specified Description Improper neutralization of special elements used in an SQL command, known as SQL injection, allows an authorized attacker to elevate privileges over a network. Recommendations At t...

PT-2026-79202

Name of the Vulnerable Software and Affected Versions Azure SQL Database affected versions not specified Description Improper access control allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version that contai...

PT-2026-79206

Name of the Vulnerable Software and Affected Versions Azure SQL Database affected versions not specified Description An issue involving improper neutralization of special elements used in an SQL command, known as SQL injection, allows an authorized attacker to elevate privileges over a network...

CVE-2026-68782: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...

CVE-2026-68789: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: argo-events, chisel, nri-haproxy, aws-flb-cloudwatch, newrelic-infra-operator, tigera-operator, zarf, envconsul, terragrunt, amazon-cloudwatch-agent-operator, crossplane-provider-aws-elasticache, sftpgo-plugin-pubsub, conftest, emissary, hubble-ui, cluster-api,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: argo-events, chisel, zarf, dagger, terragrunt, crossplane-provider-aws-elasticache, cilium-cli, buildkitd, nerdctl, mattermost, crossplane-provider-aws-route53, terraform-provider-azurerm, kubernetes-dashboard, crossplane-provider-aws-iam, loki, step, sops,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: chisel, nri-haproxy, aws-flb-cloudwatch, newrelic-infra-operator, ytt, swagger, maru, sbomqs, amazon-cloudwatch-agent-operator, crossplane-provider-aws-elasticache, sftpgo-plugin-pubsub, conftest, cilium-cli, hubble-ui, nerdctl, pvc-autoresizer,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: argo-events, gitsign, rabbitmq-messaging-topology-operator, zarf, goreleaser, terragrunt, guac, cosign, src-fingerprint, flux-image-reflector-controller, vexctl, tekton-chains, k3d, neuvector-sigstore-interface, buildkitd, falcoctl, opentelemetry-collector,...