CVE-2026-68782

Critical9.9 Published on Aug 20, 2026

Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.

CVSS score9.9 / 10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness type (CWE)CWE-89

Vendorsmicrosoft

Affected products

Vendors	Product	Versions
microsoft	azure sql database	-

Cloud Security

Microsoft patches 22 flaws: Entra ID already secured, but ShieldBreak remains unpatched

Microsoft updates 22 security flaws: Entra ID fixed, but ShieldBreak zero-day in Defender still unpatched. Cloud vulnerabilities mostly server-mitigated.

Aug 24, 202603:19 4 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

Microsoft patches 22 flaws: Entra ID already secured, but ShieldBreak remains unpatched