Azure SQL Managed Instance Elevation of Privilege VulnerabilityVendor advisorypatch
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62836 CVE-2026-62836
HIGH
Azure SQL Managed Instance Elevation of Privilege Vulnerability
Record summary
CVE-2026-62836 has a selected CVSS score of 8.7 (high).
Description
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.
Description source: GitHub Advisory
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 7, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Azure SQL Managed InstanceBrowse Microsoft / Azure SQL Managed Instance | CVE List | - | affected |
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-62836