CVE Catalog
CVE-2026-70340
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk0.59%
45th percentile - higher than 45% of all known CVEs
Summary
Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.
Risk Assessment
An authorized user could exploit the missing authorization to gain higher privileges, potentially leading to unauthorized cluster management.
Recommendation
Apply security updates provided by Microsoft for Azure CycleCloud.
Original NVD description (English source)
Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.