CVE-2026-72860

creationtimestamp| type| source ---|---|--- 2026-08-20 23:01:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtke26um3722...

CVE-2026-68789

Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...

CVE-2026-68782

Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...

CVE-2026-66309

Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network...

CVE-2026-68782 Azure SQL Database Elevation of Privilege Vulnerability

...

CVE-2026-68782 Azure SQL Database Elevation of Privilege Vulnerability

...

CVE-2026-68782

An SQL injection flaw in Azure SQL Database allows an authenticated, low-privilege network attacker to elevate privileges, with CVSS 9.9 (Critical) reflecting full confidentiality, integrity, and availability impact. Microsoft's update guide is the primary remediation reference; no patch version ...

CVE-2026-66309 Azure SQL Database Elevation of Privilege Vulnerability

...

CVE-2026-66309 Azure SQL Database Elevation of Privilege Vulnerability

...

CVE-2026-66309

CVE-2026-66309 is a Critical (CVSS 9.1) elevation-of-privilege flaw in Azure SQL Database; an authenticated, high-privilege attacker can escalate privileges over the network, affecting confidentiality, integrity, and availability. No affected versions, root cause, or patch details are provided in...

CVE-2026-65770 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

...

CVE-2026-68789 Azure SQL Database Elevation of Privilege Vulnerability

...

CVE-2026-68789 Azure SQL Database Elevation of Privilege Vulnerability

...

CVE-2026-68789

CVE-2026-68789 is a SQL injection vulnerability in Azure SQL Database that allows an authorized attacker to elevate privileges over a network. The vulnerability is rated CVSS 9.9 (CRITICAL) with a scope change, indicating high impact on confidentiality, integrity, and availability. CISA's SSVC as...

CVE-2026-55769

CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.28.4 and 1.29.2, CloudNativePG opened superuser connections without pinning searchpath in fillDefaultParameters in pkg/management/postgres/pool/profiles.go. A role holding DATABASE OWNER...

CVE-2026-46682

BigBlueButton is an open-source virtual classroom. Prior to 3.0.23, BigBlueButton allowed authenticated moderators to inject SQL through the meetingId and userId values used by refreshBreakoutRoomsVisibleForUsers in akka-bbb-apps/src/main/scala/org/bigbluebutton/core/db/BreakoutRoomUserDAO.scala...

Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database

Summary A SQL injection vulnerability in Fleet's Okta conditional access integration could allow an attacker who controls a single enrolled host to read or modify arbitrary data in the Fleet database, including stored session tokens. Disclosed session tokens may be replayed to act as a global...

GHSA-7Q96-F8XW-JV5J Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database

Summary A SQL injection vulnerability in Fleet's Okta conditional access integration could allow an attacker who controls a single enrolled host to read or modify arbitrary data in the Fleet database, including stored session tokens. Disclosed session tokens may be replayed to act as a global...

EUVD-2026-42235

Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import...

CVE-2026-18274

Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Heimdall Data Database Proxy. Authentication is required to exploit this vulnerability. The specific fl...