Known vulnerabilities in Azure CycleCloud

Known vulnerabilities in Azure CycleCloud

Vendor: Microsoft

Software: Azure CycleCloud

Software CPE: cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*

Website: https://www.microsoft.com

Total vulnerabilities: 14

Public exploits: 0

Known exploited (KEV): 0

Breakdown by Severity Chart

Vulnerabilities (14)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU155784 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2026-100207	CWE-78	Medium	No	No	8.9.2	14.10.2026	SB2026101487
#VU147790 - Insufficiently Protected Credentials CVE-2026-77909	CWE-522	Medium	No	No	8.9.2	08.09.2026	SB2026090876
#VU142252 - Missing Authorization CVE-2026-65806	CWE-862	Medium	No	No	8.9.2	13.08.2026	SB2026081332
#VU142251 - Missing Authorization CVE-2026-70340	CWE-862	Medium	No	No	8.9.1	13.08.2026	SB2026081331
#VU138306 - Missing Authorization CVE-2026-58279	CWE-862	Medium	No	No	8.9.1	17.07.2026	SB2026071755
#VU138305 - Missing Authentication for Critical Function CVE-2026-57969	CWE-306	Medium	No	No	8.9.1	17.07.2026	SB2026071755
#VU100371 - Improper Authorization CVE-2024-43602	CWE-285	Medium	No	No	-	12.11.2024	SB20241112138
#VU97104 - Improper Control of Generation of Code ('Code Injection') CVE-2024-43469	CWE-94	Medium	No	No	8.6.4	10.09.2024	SB20240910142
#VU95888 - Improper Access Control CVE-2024-38195	CWE-284	Medium	No	No	8.6.3	13.08.2024	SB20240813104
#VU93956 - Protection Mechanism Failure CVE-2024-38092	CWE-693	Medium	No	No	-	09.07.2024	SB20240709101
#VU88369 - Improper Access Control CVE-2024-29993	CWE-284	Medium	No	No	-	10.04.2024	SB2024041018
#VU69131 - Permissions, Privileges, and Access Controls CVE-2022-41085	CWE-264	Low	No	No	-	08.11.2022	SB2022110889
#VU55706 - Permissions, Privileges, and Access Controls CVE-2021-36943	CWE-264	Low	No	No	-	10.08.2021	SB2021081021
#VU55705 - Permissions, Privileges, and Access Controls CVE-2021-33762	CWE-264	Low	No	No	-	10.08.2021	SB2021081021