azure_cyclecloud_8.9.2 vulnerabilities
CVEs whose affected-version data names the azure_cyclecloud_8.9.2 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-100207High· 7.3Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally.
Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally.
▾ TwilightMicrosoft · Azure CycleCloud 8.9.1EPSS 0.44%via NVD
CVE-2026-65806Medium· 6.5Azure CycleCloud Information Disclosure Vulnerability
Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network.
▾ SunlitMicrosoft · Azure CycleCloud 8.9.2EPSS 0.84%via CVEORG