Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:azure_cyclecloud_8.9.1:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductAzure Cyclecloud 8.9.1 (82ce3ba9-5d6f-5005-9820-d10c55fe1db5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-100207 vulnerable 2026-11-03 10:15:33.350544 Azure CycleCloud Remote Code Execution Vulnerability
HIGH (7.3)
Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally.
Published: 2026-10-13T19:01:30.281Z
Updated: 2026-11-10T20:45:48.618Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-70340 vulnerable 2026-09-16 04:32:59.990084 Azure CycleCloud Elevation of Privilege Vulnerability
HIGH (8.1)
Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.
Published: 2026-08-11T17:05:33.877Z
Updated: 2026-11-10T21:59:15.964Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.