Missing Authentication for Critical Function in Azure CycleCloud - CVE-2026-57969
Published: July 17, 2026
Vulnerability identifier: #VU138305
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-57969
CWE-ID: CWE-306
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to escalate privileges on the system.
The vulnerability exists due to missing authentication for critical function in Azure CycleCloud, which leads to security restrictions bypass and privilege escalation.
Affected software
Azure CycleCloud
How to mitigate CVE-2026-57969
Install updates from vendor's website.
Azure CycleCloud - update to 8.9.1