Improper Authorization in Azure Database for PostgreSQL
CVE-2026-85878

9.9CRITICAL

Key Information:

Vendor

Microsoft
Status
Azure Horizondb
Vendor
CVE Published:
17 September 2026

What is CVE-2026-85878?

A vulnerability in Azure Database for PostgreSQL allows an authorized attacker to exploit improper authorization mechanisms and elevate their privileges over a network. This loophole can lead to unauthorized access to sensitive data and resources within the Azure environment, raising serious security concerns. It is crucial for users and administrators to be aware of this vulnerability and apply the necessary patches to safeguard their databases.

Affected Version(s)

Azure HorizonDB -

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.