EUVD-2026-54311
GHSA-jgfq-jqm8-rpfv
Severity by source
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Remote, unauthenticated, low-complexity channel/auth bypass in a multi-tenant service crossing an isolation boundary (S:C) with high C/I but no availability impact.
Primary rating from Vendor (microsoft).
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Lifecycle Timeline
6DescriptionNVD
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.
AnalysisAI
Privilege elevation in Microsoft Azure SQL Managed Instance lets an unauthenticated network attacker cross the intended communication-channel boundary and gain elevated privileges, carrying a scope-changed CVSS of 10.0 that reflects likely cross-tenant or cross-service impact in this multi-tenant PaaS offering. Microsoft tags it as an authentication bypass exposing high-value confidentiality and integrity, with no availability loss. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Per the CVSS vector (AV:N/AC:L/PR:N/UI:N), no special conditions and no authentication are required - remote, unauthenticated network exploitation of the affected Azure SQL Managed Instance endpoint against its standard configuration, with a scope change (S:C) indicating impact beyond the initially reached component, consistent with a cross-tenant isolation-boundary escape. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals partly conflict and must be weighed carefully. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An unauthenticated attacker on the network reaches an Azure SQL Managed Instance endpoint that should have been isolated to intended, authenticated peers, and abuses the improperly restricted channel to bypass authentication and gain elevated privileges - potentially reaching data or control functions belonging to another tenant. No user interaction and no credentials are required and attack complexity is low; no public POC is known, so a real attack would require independently rediscovering the channel weakness. |
| Remediation | Because Azure SQL Managed Instance is a Microsoft-operated PaaS, remediation is a service-side fix delivered by the vendor and generally requires no customer action - Patch available per vendor advisory (MSRC) at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62836; no exact customer-installable fix version applies to a cloud service. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, audit all Azure SQL Managed Instance deployments and enable enhanced monitoring on database authentication and access logs to detect exploitation attempts. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today