Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
10.0
CVE-2026-69502: Azure SQL Database may let attackers gain higher access
CVE-2026-69502 · published 13 days ago
Summary
A flaw in Azure SQL Database could let an outside attacker trick the system into making network requests on its behalf. This can allow the attacker to increase their permissions and access more data than intended. Apply the latest security updates from Microsoft as soon as possible to close the gap.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | azure sql database | - |
Original advisory text
Azure SQL Database Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69502 vendor-advisory patch
Severity
10.0
Critical
CVSS 3.1: 10.0 (MITRE)
Exploitation
EPSS <1%
Type
CWE-918Server-Side Request Forgery (SSRF)
Timeline
Published21 Aug 2026
Updated3 Sep 2026
First seen21 Aug 2026
Monitor software like this
Free during beta