5 matches found
Security Updates for Azure CycleCloud < 8.9.2 (August 2026)
The Azure CycleCloud product is missing a security update. It is, therefore, affected by the following vulnerabilities: - Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. CVE-2026-70340 - Missing authorization in Azure CycleCloud allows...
CVE-2026-70340
creationtimestamp| type| source ---|---|--- 2026-08-11 19:00:56+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-12 01:00:51+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-12 07:02:12+00:00| seen|...
CVE-2026-70340 Azure CycleCloud Elevation of Privilege Vulnerability
...
CVE-2026-70340
Azure CycleCloud CVE-2026-70340: AMissing authorization vulnerability could allow an authenticated attacker to elevate privileges over a network. The issue affects Azure CycleCloud and is rated HIGH (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H). The root cause is insufficient access control, en...
