8.1
High
CVE-2026-70340 Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network
Description
Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Azure CycleCloud 8.9.1 1.0 | 1.0.0 → < 8.9.1 | 8.9.1 |
Other CVEs of Azure CycleCloud 8.9.1
The 4 CVEs of Azure CycleCloud 8.9.1 →
CVE-2026-100207
Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an…
7.3
High
CVE-2026-58279
Azure CycleCloud Elevation of Privilege Vulnerability
6.5
Medium
CVE-2026-57969
Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges…
8.8
High