CVE-2026-77909

Microsoft · Published September 8, 2026

7.7

CVSS v3.1

HIGH

Patch availableGet patch

Description

Azure CycleCloud Information Disclosure Vulnerability. Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network.

Affected Products

Azure CycleCloud 8.9.2

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C