Lucene search
+L

122 matches found

NVD
NVD
•added 2026/10/13 7:17 p.m.•11 views

CVE-2026-100207

Improper neutralization of special elements used in an os command 'os command injection' in Azure CycleCloud allows an authorized attacker to execute code locally...

7.3CVSS0.00416EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 7:01 p.m.•34 views

CVE-2026-100207

A vulnerability in Azure CycleCloud involving improper neutralization of special elements used in an OS command (OS command injection) allows an authorized attacker to execute code locally . This flaw is associated with CWE-78 and has a CVSS 3.1 base score of 7.3 . While the vulnerability was ide...

7.3CVSS6.3AI score0.00416EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/13 7:01 p.m.•10 views

EUVD-2026-100318

Improper neutralization of special elements used in an os command 'os command injection' in Azure CycleCloud allows an authorized attacker to execute code locally...

7.3CVSS6.3AI score0.00416EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•11 views

Azure CycleCloud Remote Code Execution Vulnerability

Improper neutralization of special elements used in an os command 'os command injection' in Azure CycleCloud allows an authorized attacker to execute code locally...

7.3CVSS6.4AI score0.00416EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•8 views

PT-2026-111884

Name of the Vulnerable Software and Affected Versions Azure CycleCloud affected versions not specified Description Improper neutralization of special elements used in an OS command leads to an OS command injection. This allows an authorized attacker to execute code locally on the system...

7.3CVSS6.4AI score0.00416EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-100207: Improper Neutralization of Special Elements used in an OS Command

Improper neutralization of special elements used in an os command 'os command injection' in Azure CycleCloud allows an authorized attacker to execute code locally...

7.3CVSS6.3AI score0.00416EPSS
SaveExploits0References2
Kaspersky
Kaspersky
•added 2026/10/13 12:00 a.m.•19 views

KLA91335 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability i...

7.5CVSS7.1AI score0.00923EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
•added 2026/10/07 12:00 a.m.•8 views

Azure CycleCloud Insufficient Protection Unauthorized Access

The vulnerability of the Azure CycleCloud tool for organizing and managing high-performance computing environments is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

7.7CVSS6.7AI score0.00579EPSS
SaveExploits0References2Affected Software1
NCSC
NCSC
•added 2026/09/14 9:07 a.m.•63 views

Vulnerabilities in Microsoft Azure

Microsoft has identified 4 vulnerabilities in various Azure components. A malicious individual could exploit these vulnerabilities to carry out attacks that can lead to various types of damage, as mentioned in the table below. The vulnerability with identifier CVE-2026-69854 has a CVSS score of...

9CVSS7.6AI score0.00798EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/08 6:20 p.m.•18 views

CVE-2026-77909

Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network...

7.7CVSS0.00579EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/08 5:13 p.m.•17 views

EUVD-2026-73295

Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network...

7.7CVSS7.2AI score0.00579EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/08 5:13 p.m.•42 views

CVE-2026-77909

CVE-2026-77909 affects Azure CycleCloud , where insufficiently protected credentials allow an authorized attacker to disclose information over a network . The vulnerability is rated CVSS 3.1 7.7 (HIGH) with a scope change and high confidentiality impact (vector: AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:...

7.7CVSS7.2AI score0.00579EPSS
SaveExploits0References1Affected Software1
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•19 views

Azure CycleCloud Information Disclosure Vulnerability

Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network...

7.7CVSS7.2AI score0.00579EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•7 views

CVE-2026-77909: Insufficiently Protected Credentials

Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network...

7.7CVSS7.2AI score0.00579EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•26 views

PT-2026-87983

Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network...

7.7CVSS7.2AI score0.00579EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/08/14 12:00 a.m.•19 views

Security Updates for Azure CycleCloud < 8.9.1

The Azure CycleCloud product is missing a security update. It is, therefore, affected by the following vulnerabilities: - Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. CVE-2026-57969 - An improper input...

9.8CVSS7.4AI score0.0168EPSS
SaveExploits3References9
Tenable Nessus
Tenable Nessus
•added 2026/08/14 12:00 a.m.•35 views

Security Updates for Azure CycleCloud < 8.9.2 (August 2026)

The Azure CycleCloud product is missing a security update. It is, therefore, affected by the following vulnerabilities: - Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. CVE-2026-70340 - Missing authorization in Azure CycleCloud allows...

8.8CVSS7.3AI score0.0084EPSS
SaveExploits0References10
NVD
NVD
•added 2026/08/11 5:19 p.m.•30 views

CVE-2026-70340

Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...

8.8CVSS0.00798EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/11 5:19 p.m.•14 views

CVE-2026-65806

Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network...

6.5CVSS0.0084EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/11 5:05 p.m.•39 views

CVE-2026-65806 Azure CycleCloud Information Disclosure Vulnerability

...

6.5CVSS0.0084EPSS
SaveExploits0References1
Rows per page
Query Builder