CVE Catalog
CVE-2026-68789
CriticalCVSS 9.9Summary
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
Risk Assessment
An authorized attacker can exploit SQL injection to manipulate the database, potentially leading to privilege escalation and data integrity compromise.
Recommendation
Apply patches from Microsoft for Azure SQL Database and review SQL queries for vulnerabilities.
Original NVD description (English source)
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.