CVE-2026-70340

Microsoft · Published August 11, 2026

8.1

CVSS v3.1

HIGH

Patch availableGet patch

Description

Azure CycleCloud Elevation of Privilege Vulnerability. Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

Affected Products

Azure CycleCloud 8.9.1

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C