7.3
High
CVE-2026-100207 Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an…
Description
Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Azure CycleCloud 8.9.1 1.0 | 1.0.0 → < 8.9.2 | 8.9.2 |
| Azure CycleCloud 8.9.2 | Versions not published |
Other CVEs of Azure CycleCloud 8.9.1
The 4 CVEs of Azure CycleCloud 8.9.1 →
CVE-2026-70340
Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network
8.1
High
CVE-2026-58279
Azure CycleCloud Elevation of Privilege Vulnerability
6.5
Medium
CVE-2026-57969
Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges…
8.8
High