CVE-2026-26145 MEDIUM

CVE-2026-26145: Microsoft Azure Synapse Elevation of Privilege Vulnerability

Vendor Microsoft

Product Azure Synapse

Weakness CWE-284

Published July 2, 2026

Last update July 3, 2026

CVSS base score

4.8/10

Attack vector Network

Attack complexity High

Privileges required Low

User interaction Required

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C

What the vulnerability does

01Description

Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network.

Key dates

July 2, 2026 CVE published

July 3, 2026 Record updated

External resources

Related vulnerabilities