AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

MicrosoftCVE-2026-68789

Microsoft Azure SQL Database: SQL injection

Microsoft

CVE-2026-68789 · Published Aug 20, 2026 · updated Aug 24, 2026

Critical9.9
No fix yet
Microsoft advisory

Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.

Affected versions

PackageAffectedFixed in
Azure SQL Database
Product
all versionsNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-89

More Microsoft advisories

All Microsoft
High 7.7Aug 20Microsoft Copilot in Azure: server-side request forgeryCVE-2026-69855no fix yetMedium 6.5Aug 20Microsoft Office Word: improper input validationCVE-2026-70105fixed in 16.112.26081010 +1High 8.6Aug 20Microsoft Azure Stack HCI: unauthorized attacker could disclose information overCVE-2026-69519no fix yetHigh 8.5Aug 20Microsoft Azure Virtual Machines: server-side request forgeryCVE-2026-69543no fix yetCritical 10.0Aug 20Microsoft Azure ARC: improper authorizationCVE-2026-69555no fix yetHigh 8.6Aug 20Microsoft Partner Center: insecure direct object referenceCVE-2026-69558no fix yet