CVE-2026-62836

Microsoft · Published August 6, 2026

8.7

CVSS v3.1

HIGH

Patch availableGet patch

Description

Azure SQL Managed Instance Elevation of Privilege Vulnerability. Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.

Affected Products

Azure SQL Managed Instance

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C