CVE-2026-57969

Microsoft · Published July 14, 2026

8.8

CVSS v3.1

HIGH

Patch availableGet patch

Description

Azure CycleCloud Elevation of Privilege Vulnerability. Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

Affected Products

Azure CycleCloud 8.9.1

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C