azure_cyclecloud_8.9.1 vulnerabilities
CVEs whose affected-version data names the azure_cyclecloud_8.9.1 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2026-100207High· 7.3Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally.
Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally.
▾ TwilightMicrosoft · Azure CycleCloud 8.9.1EPSS 0.44%via NVD
CVE-2026-70340High· 8.1Azure CycleCloud Elevation of Privilege Vulnerability
Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.
▾ TwilightMicrosoft · Azure CycleCloud 8.9.1EPSS 0.80%via CVEORG
CVE-2026-57969High· 8.8Azure CycleCloud Elevation of Privilege Vulnerability
Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.
▾ TwilightMicrosoft · Azure CycleCloud 8.9.1EPSS 0.78%via CVEORG
CVE-2026-58279Medium· 6.5Azure CycleCloud Elevation of Privilege Vulnerability
Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.
▾ SunlitMicrosoft · Azure CycleCloud 8.9.1EPSS 0.64%via CVEORG