CVE-2026-68789 Azure SQL Database Elevation of Privilege Vulnerability

...

Azure SQL Database Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...

Azure SQL Database Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...

Azure SQL Database Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...

Azure SQL Database Elevation of Privilege Vulnerability

Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network...

PT-2026-79206

Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...

PT-2026-79207

Name of the Vulnerable Software and Affected Versions Azure SQL Database affected versions not specified Description Improper neutralization of special elements used in an SQL command, known as SQL injection, allows an authorized attacker to elevate privileges over a network. Recommendations At t...

PT-2026-79202

Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation, traefik, kapp-controller, pinact, vcluster, net-kourier, timoni, multus-cni, gogatekeeper, spqr, cloudnative-pg, grafana, paranoia, amazon-cloudwatch-agent-operator, ksops, jaeger-operator, kubeflow, cass-operator, flux,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation, traefik, pulumi-language-yaml, wolfictl, ksops, flux, crossplane-provider-aws-eks, crossplane-provider-aws-cloudwatchlogs, steampipe, pulumi-language-dotnet, nerdctl, snyk-cli, flux-image-automation-controller, knative-serving,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, crossplane-provider-aws-cloudformation, traefik, kapp-controller, timoni, spqr, gogatekeeper, extism, paranoia, amazon-cloudwatch-agent-operator, ksops, gcp-compute-persistent-disk-csi-driver, kubeflow, kubernetes-dashboard-api, cass-operator, lazygit,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: falcoctl, rabbitmq-messaging-topology-operator, zarf, sops, flux-helm-controller, src-fingerprint, glab, gitsign, terragrunt, step-ca, slsa-verifier, flux-notification-controller, terraform, aactl, ksops, tekton-chains, rook, sigstore-scaffolding, vexctl, flux,...

CVE-2026-63522

Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally...

CVE-2026-63522 Azure SQL Database Elevation of Privilege Vulnerability

...

EUVD-2026-56769

Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally...

CVE-2026-63522

Azure SQL Database is the affected product for CVE-2026-63522, described as an incorrect permission assignment for a critical resource that allows an authorized attacker to elevate privileges locally. The issue has a base CVSSv3.1 score of 7.8 (HIGH) with LOCAL access, low attack complexity, and ...

CVE-2026-63522 Azure SQL Database Elevation of Privilege Vulnerability

...

PT-2026-70614

Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally...

EUVD-2026-54311

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-62836

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...