← Database

CVE-2026-68789

CRITICAL CVSS: 9.9 Published: 2026-08-20 Modified: 2026-08-24

Description

Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.

Affected Platforms

Microsoft Azure Sql Database

Weakness Type

CWE-89

References