critical9.9
CVE-2026-68789
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges …
Impact
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Azure Sql Database | All versions |