CVE-2026-69502
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
Server-Side Request Forgery (SSRF) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
An attacker could exploit SSRF to access internal network resources and escalate privileges, potentially compromising data confidentiality and integrity.
Recommendation
Apply updates provided by Microsoft for Azure SQL Database and monitor the network for unusual requests.
Other vulnerabilities in Azure SQL Database
See all- CVE-2026-68789Critical
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
- CVE-2026-68782Critical
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
- CVE-2026-66309Critical
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
- CVE-2026-56162Critical
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-63522High
Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS