108 matches found
PT-2026-79206
Name of the Vulnerable Software and Affected Versions Azure SQL Database affected versions not specified Description An issue involving improper neutralization of special elements used in an SQL command, known as SQL injection, allows an authorized attacker to elevate privileges over a network...
PT-2026-79202
Name of the Vulnerable Software and Affected Versions Azure SQL Database affected versions not specified Description Improper access control allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version that contai...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-linode, kube-state-metrics, rekor, rancher, step-issuer, aws-nuke, net-kourier, actions-runner-controller, rancher-helm, omnibump, descheduler, chisel, conftest, q, kubescape-operator, controller-gen, k9s, kubernetes-csi-node-driver-registrar,...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-linode, rancher, grype, kaf, step-issuer, step, wolfictl, chisel, fulcio, k9s, crossplane-provider-azure-managedidentity, docker, terragrunt, openbao, traefik, step-kms-plugin, skaffold, caddy, melange, falcoctl, scorecard, glab,...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: terraform, git-sync, docker-machine-driver-linode, langfuse, http-echo, step, actions-runner-controller, rancher-helm, terraform-provider-time, helm-set-status, wave, lvm-driver, descheduler, chisel, conftest, pguser, kubescape-operator, kubo,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: terraform, rekor, argo-events, actions-runner-controller, flux-kustomize-controller, flux-helm-controller, gitsign, gomplate, fulcio, skopeo, sops, policy-controller, crossplane-provider-azure-managedidentity, terragrunt, pulumi-kubernetes-operator, snyk-cli,...
Azure SQL Managed Instance Privilege Escalation
The vulnerability of Azure SQL Managed Instance PaaS is related to insufficient network connection restrictions for specified endpoints. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Azure SQL Database Privilege Escalation
The vulnerability of Azure SQL Database cloud relational database is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...
CVE-2026-63522
Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally...
EUVD-2026-56769
Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally...
CVE-2026-63522
Azure SQL Database is the affected product for CVE-2026-63522, described as an incorrect permission assignment for a critical resource that allows an authorized attacker to elevate privileges locally. The issue has a base CVSSv3.1 score of 7.8 (HIGH) with LOCAL access, low attack complexity, and ...
CVE-2026-63522 Azure SQL Database Elevation of Privilege Vulnerability
...
CVE-2026-63522 Azure SQL Database Elevation of Privilege Vulnerability
...
PT-2026-70614
Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally...
CVE-2026-63522: Incorrect Permission Assignment for Critical Resource
Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally...
EUVD-2026-54311
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-62836
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-56162
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-62836: Improper Restriction of Communication Channel to Intended Endpoints
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...