Main Vulnerability Database Vulnerabilities #VU138306

Missing Authorization in Azure CycleCloud - CVE-2026-58279

Published: July 17, 2026

Vulnerability identifier: #VU138306

CSH Severity: Medium

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Green

CVE-ID: CVE-2026-58279

CWE-ID: CWE-862

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vendor: Microsoft

Affected software:
Azure CycleCloud

Detailed vulnerability description

The vulnerability allows a remote user to escalate privileges on the system.

The vulnerability exists due to missing authorization in Azure CycleCloud, which leads to security restrictions bypass and privilege escalation.

Install updates from vendor's website.