Azure CycleCloud 8.9.2 vulnerabilities

2 known vulnerabilities in Azure CycleCloud 8.9.2 from Microsoft. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Azure CycleCloud 8.9.2: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-114161Nov 10, 2026Microsoft

  Improper limitation of a pathname to a restricted directory ('path traversal') in Azure CycleCloud allows an authorized attacker to elevate privileges locally.

• 7.5 High severity

  Azure CycleCloud 8.9.2: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-113823Nov 10, 2026MicrosoftEPSS 1.31%

  Improper limitation of a pathname to a restricted directory ('path traversal') in Azure CycleCloud allows an unauthorized attacker to disclose information over a network.