CVE-2026-65806
Analyzed Analyzed - Analysis Complete

Missing Authorization in Azure CycleCloud Information Disclosure

Publication date: 2026-08-11

Last updated on: 2026-08-17

Assigner: Microsoft Corporation

Description
Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-11
Last Modified
2026-08-17
Generated
2026-09-01
AI Q&A
2026-08-12
EPSS Evaluated
2026-08-30
NVD
CVE-2026-65806
EUVD
EUVD-2026-56592

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
microsoft azure_cyclecloud to 8.9.2 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a missing authorization issue in Azure CycleCloud. An authorized attacker can exploit this to disclose information over a network without proper access controls.

Detection Guidance

Detection requires checking Azure CycleCloud instances for unauthorized information disclosure. Review network logs for unusual data access patterns and verify authorization controls in Azure CycleCloud configurations. No specific commands are provided in the available resources.

Impact Analysis

An attacker could gain access to sensitive information stored or processed by Azure CycleCloud, potentially leading to data breaches or unauthorized data exposure.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA due to unauthorized data disclosure. Organizations may face penalties for failing to protect sensitive data.

Mitigation Strategies

Apply the latest security updates from Microsoft for Azure CycleCloud as soon as possible to address the missing authorization issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-65806. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart