CVE-2026-70340

Improper neutralization of special elements used in an OS command ('OS command injection') in Azure CycleCloud allows an authorized attacker to execute code locally.

Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network.

Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network.

Azure CycleCloud has a missing authorization vulnerability, allowing an authorized attacker to elevate privileges over a network.

Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

Remote code execution vulnerability in Azure CycleCloud. Allows an attacker to execute code in the context of the application.

Elevation of privilege vulnerability in Azure CycleCloud. An attacker could exploit it to gain unauthorized privileges.

A vulnerability in Azure CycleCloud allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges in the system.

Elevation of privilege vulnerability in Azure CycleCloud. An attacker could exploit it to gain higher privileges in the CycleCloud environment.