CVE-2026-58279

Microsoft · Published July 14, 2026

6.5

CVSS v3.1

MEDIUM

Patch availableGet patch

Description

Azure CycleCloud Elevation of Privilege Vulnerability. Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

Affected Products

Azure CycleCloud 8.9.1

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C