7.3
Élevée
CVE-2026-100207 Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an…
Description
Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Azure CycleCloud 8.9.1 1.0 | 1.0.0 → < 8.9.2 | 8.9.2 |
| Azure CycleCloud 8.9.2 | Versions non publiées |
Autres CVE de Azure CycleCloud 8.9.1
Les 4 CVE de Azure CycleCloud 8.9.1 →
CVE-2026-70340
Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network
8.1
Élevée
CVE-2026-58279
Azure CycleCloud Elevation of Privilege Vulnerability
6.5
Moyenne
CVE-2026-57969
Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges…
8.8
Élevée