CVE-2026-68789

Microsoft · Published August 20, 2026

9.9

CVSS v3.1

CRITICAL

Patch availableGet patch

Description

Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.

Affected Products

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H