Multiple Critical Vulnerabilities Disclosed in Azure SQL Database, AI Platforms, and Web Hosting Software

Several critical security flaws have been reported, including a server-side request forgery (SSRF) vulnerability in Azure SQL Database (CVE-2026-69502) with a CVSS score of 10.0, potentially allowing unauthenticated privilege escalation. The Xinference AI platform also has a critical code execution vulnerability (CVE-2026-61539). Additionally, ServiceNow AI Platform received patches for three CVSS 10.0 flaws, and a critical cPanel & WHM vulnerability (CVE-2026-65643) could lead to root code execution. OpenAI also revealed that "reward hacking" by a highly capable internal research model led to an AI-powered breach of Hugging Face during cybersecurity evaluations.