CVE-2026-56162— Azure SQL Database Elevation of Privilege Vulnerability
Possible ATT&CK Techniques 1AI
T1078 · Valid AccountsAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Microsoft | Azure SQL Database | - | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-56162
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Azure SQL Database Elevation of Privilege Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
认证机制不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Microsoft | Azure SQL Database | - | - |
II. Public POCs for CVE-2026-56162
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-56162
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-56162 (1)
Same Patch Batch · Microsoft · 2026-08-06 · 17 CVEs total
| CVE-2026-65667 | 10.0 CRITICAL | Microsoft Teams Elevation of Privilege Vulnerability |
| CVE-2026-63508 | 10.0 CRITICAL | Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability |
| CVE-2026-50481 | 9.9 CRITICAL | Azure Active Directory Elevation of Privilege Vulnerability |
| CVE-2026-59115 | 9.9 CRITICAL | Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability |
| CVE-2026-62830 | 9.9 CRITICAL | Azure SRE Agent Elevation of Privilege Vulnerability |
| CVE-2026-50515 | 9.9 CRITICAL | Azure Service Bus Remote Code Execution Vulnerability |
| CVE-2026-62873 | 9.8 CRITICAL | Microsoft 365 Admin Center Elevation of Privilege Vulnerability |
| CVE-2026-62896 | 9.6 CRITICAL | Microsoft Teams Elevation of Privilege Vulnerability |
| CVE-2026-56161 | 9.6 CRITICAL | Azure Logic Apps Information Disclosure Vulnerability |
| CVE-2026-70332 | 9.6 CRITICAL | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-59118 | 9.3 CRITICAL | Microsoft Power Apps Elevation of Privilege Vulnerability |
| CVE-2026-68823 | 9.1 CRITICAL | Azure Confidential Ledger Remote Code Execution Vulnerability |
| CVE-2026-65668 | 8.8 HIGH | Microsoft Purview eDiscovery Elevation of Privilege Vulnerability |
| CVE-2026-49163 | 8.8 HIGH | Application Insights Profiler Elevation of Privilege Vulnerability |
| CVE-2026-62836 | 8.7 HIGH | Azure SQL Managed Instance Elevation of Privilege Vulnerability |
| CVE-2026-62918 | 7.5 HIGH | Microsoft Teams Spoofing Vulnerability |
IV. Related Vulnerabilities
Same vendor: Microsoft
- CVE-2026-70332
Microsoft Office SharePoint Spoofing Vulnerability - CVE-2026-62873
Microsoft 365 Admin Center Elevation of Privilege Vulnerabil - CVE-2026-63508
Microsoft Planetary Computer Pro Elevation of Privilege Vuln - CVE-2026-50515
Azure Service Bus Remote Code Execution Vulnerability - CVE-2026-65667
Microsoft Teams Elevation of Privilege Vulnerability
Same weakness: CWE-287
- CVE-2026-48039
Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks - CVE-2026-56793
Dell OpenManage <11.1.0.2 身份验证不当漏洞 - CVE-2026-62896
Microsoft Teams Elevation of Privilege Vulnerability - CVE-2026-48087
OpenReception: WebAuthn passkey injection allows account tak - CVE-2026-64665
Statamic: Account takeover via OAuth email matching without
V. Comments for CVE-2026-56162
No comments yet