SQL Injection Vulnerability in Azure SQL Database by Microsoft
CVE-2026-68782

9.9CRITICAL

Key Information:

Vendor

Microsoft
Status
Azure Sql Database
Vendor
CVE Published:
20 August 2026

What is CVE-2026-68782?

An SQL injection vulnerability exists in Azure SQL Database that allows an attacker with valid access to manipulate SQL commands. By improperly neutralizing special elements within SQL statements, this vulnerability enables privileged actions that can compromise the security of the database and its data. This issue demands immediate attention to prevent potential unauthorized escalations of access levels in the affected environment.

Affected Version(s)

Azure SQL Database -

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.