CVE-2026-102224

Vendor

Microsoft

Product

Azure CycleCloud 8.9.1

CVSS v3.1

8.4 AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Weakness

CWE-78

Exposure class

Cloud platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 42
   CVE NVD 2h ago

   Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to…

   Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

   CVSS 8.4 CVE-2026-102224 Microsoft
2. 40
   Advisory MSRC 5h ago

   Azure CycleCloud Elevation of Privilege Vulnerability

   Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

   CVE-2026-102224 Microsoft