Missing Authorization in Azure CycleCloud - CVE-2026-58279
Published: July 17, 2026
Vulnerability identifier: #VU138306
CSH Severity: Medium
CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-58279
CWE-ID: CWE-862
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to escalate privileges on the system.
The vulnerability exists due to missing authorization in Azure CycleCloud, which leads to security restrictions bypass and privilege escalation.
Affected software
Azure CycleCloud
How to mitigate CVE-2026-58279
Install updates from vendor's website.
Azure CycleCloud - update to 8.9.1