CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

CVE-2026-63522

unknowncovered by 1 sourcefirst seen 2026-08-06
Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.

CSIRTS triage

vendor: Microsoftproduct: Azure SQL DatabasePrivilege escalation
What
Incorrect permission assignment for critical resources allows local privilege escalation by authorized attackers.
Who is affected
Azure SQL Database deployments with permission misconfigurations are affected.
Urgency
Unknown severity (CVSS not provided) with no current exploitation reported; review permission assignments.
Action
Audit and correct permission assignments in Azure SQL Database deployments.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2026-63522

Get an email if CVE-2026-63522 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Advisory coverage (1)

External references

NVD record for CVE-2026-63522

CVE.org record

Embed the live status

CVE-2026-63522 live status badge — this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-63522 status](https://www.csirts.com/badge/CVE-2026-63522)](https://www.csirts.com/cve/CVE-2026-63522)