CVE-2026-57969HighCVSS 8.8
Azure CycleCloud Elevation of Privilege Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.
🎯 Affected products1
- Azure CycleCloud 8.9.1
✅ Remediation
KBRelease Notes (Security Update - Marketplace Image) — fixed build 8.9.1 KBRelease Notes (Security Update - PMC DEB) — fixed build 8.9.1 KBRelease Notes (Security Update - PMC RPM) — fixed build 8.9.1
🔗 References (5)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57969
- patchhttps://marketplace.microsoft.com/en-us/product/azurecyclecloud.azure-cyclecloud?tab=Overview
- referencehttps://learn.microsoft.com/en-us/azure/cyclecloud/release-notes/8-9-1?view=cyclecloud-8
- patchhttps://packages.microsoft.com/repos/cyclecloud/pool/main/c/cyclecloud8/cyclecloud8_8.9.1-3806_amd64.deb
- patchhttps://packages.microsoft.com/yumrepos/cyclecloud/Packages/c/cyclecloud8-8.9.1-3806.x86_64.rpm