Azure CycleCloud 8.9.1 vulnerabilities

2 known vulnerabilities in Azure CycleCloud 8.9.1 from Microsoft. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.4 High severity

  Azure CycleCloud 8.9.1: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-102224Nov 10, 2026Microsoft

  Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

• 7.3 High severity

  Azure CycleCloud 8.9.1: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-100207Oct 13, 2026Microsoft

  Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally.