112 matches found
Vulnerabilities in Microsoft Azure
Microsoft has identified 4 vulnerabilities in various Azure components. A malicious individual could exploit these vulnerabilities to carry out attacks that can lead to various types of damage, as mentioned in the table below. The vulnerability with identifier CVE-2026-69854 has a CVSS score of...
CVE-2026-77909
Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network...
CVE-2026-77909
CVE-2026-77909 affects Azure CycleCloud , where insufficiently protected credentials allow an authorized attacker to disclose information over a network . The vulnerability is rated CVSS 3.1 7.7 (HIGH) with a scope change and high confidentiality impact (vector: AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:...
EUVD-2026-73295
Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network...
Azure CycleCloud Information Disclosure Vulnerability
Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network...
CVE-2026-77909: Insufficiently Protected Credentials
Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network...
PT-2026-87983
Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network...
Security Updates for Azure CycleCloud < 8.9.2 (August 2026)
The Azure CycleCloud product is missing a security update. It is, therefore, affected by the following vulnerabilities: - Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. CVE-2026-70340 - Missing authorization in Azure CycleCloud allows...
Security Updates for Azure CycleCloud < 8.9.1
The Azure CycleCloud product is missing a security update. It is, therefore, affected by the following vulnerabilities: - Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. CVE-2026-57969 - An improper input...
CVE-2026-70340
Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...
CVE-2026-65806
Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network...
EUVD-2026-56592
Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network...
CVE-2026-65806
CVE-2026-65806 affects Azure CycleCloud. The issue is missing authorization that could allow an attacker with LOW privileges and network access to disclose information, with confidentiality impact rated HIGH. The CVSS v3.1 vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N and the base score ...
CVE-2026-65806 Azure CycleCloud Information Disclosure Vulnerability
...
CVE-2026-65806 Azure CycleCloud Information Disclosure Vulnerability
...
CVE-2026-70340 Azure CycleCloud Elevation of Privilege Vulnerability
...
CVE-2026-70340
Azure CycleCloud CVE-2026-70340: AMissing authorization vulnerability could allow an authenticated attacker to elevate privileges over a network. The issue affects Azure CycleCloud and is rated HIGH (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H). The root cause is insufficient access control, en...
CVE-2026-70340 Azure CycleCloud Elevation of Privilege Vulnerability
...