8.8
High
CVE-2026-57969 Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges…
Description
Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Azure CycleCloud 8.9.1 1.0 | 1.0.0 → < 8.9.1 | 8.9.1 |
Other CVEs of Azure CycleCloud 8.9.1
The 4 CVEs of Azure CycleCloud 8.9.1 →
CVE-2026-100207
Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an…
7.3
High
CVE-2026-70340
Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network
8.1
High
CVE-2026-58279
Azure CycleCloud Elevation of Privilege Vulnerability
6.5
Medium