Vulnerabilities

TI-2026-54238 CVE-2026-77909 · GHSA-mp48-w7m5-x4fp

Azure CycleCloud Information Disclosure Vulnerability

LOW 34

Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00579 Published 2026-09-08 Fixed in 8.9.2 CWE-522

TI-2026-46894 CVE-2026-65806 · GHSA-wf3j-79gj-v8gq

LOW 30

Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0084 Published 2026-08-11 Fixed in 8.9.2 CWE-862

TI-2026-49157 CVE-2026-70340 · GHSA-mjq4-9r9p-4wxh

MEDIUM 41

Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00798 Published 2026-08-11 Fixed in 8.9.1 CWE-862

TI-2026-41968 CVE-2026-58279 · GHSA-4wr5-3qvr-f367

LOW 32

Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00644 Published 2026-07-14 Fixed in 8.9.1 CWE-862

TI-2026-41734 CVE-2026-57969 · GHSA-5hx7-jrq3-6879

MEDIUM 41

Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00778 Published 2026-07-14 Fixed in 8.9.1 CWE-306

TI-2024-29230 CVE-2024-43602 · GHSA-f3v6-qmvg-fhwg

MEDIUM 47

Azure CycleCloud Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.02253 Published 2024-11-12 Fixed in 8.6.5 CWE-285

TI-2024-29114 CVE-2024-43469 · GHSA-v6rj-vqvp-pjw9

MEDIUM 43

Azure CycleCloud Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01595 Published 2024-09-10 Fixed in 8.6.4 CWE-94

TI-2024-25476 CVE-2024-38195 · GHSA-vh2g-wrh9-fr5p

LOW 37

Azure CycleCloud Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00514 Published 2024-08-13 Fixed in 8.6.3 CWE-284

TI-2024-25380 CVE-2024-38092 · GHSA-pp98-wjf6-6x98