CVE-2026-65806 Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network

Description

Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network.

Affected products and versions

Product	Affected versions	Fixed in
Azure CycleCloud 8.9.2 8.9	earliest → < 8.9.2	8.9.2

Other CVEs of Azure CycleCloud 8.9.2

The 3 CVEs of Azure CycleCloud 8.9.2 →

CVE-2026-100207 Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an… 7.3 High CVE-2026-77909 Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a… 7.7 High