CVE-2026-70340

Analyzed Analyzed - Analysis Complete

Missing Authorization in Azure CycleCloud Elevates Privileges

Publication date: 2026-08-11

Last updated on: 2026-08-17

Assigner: Microsoft Corporation

Description

Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-17

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-30

NVD

CVE-2026-70340

EUVD

EUVD-2026-56591

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	azure_cyclecloud	to 8.9.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This vulnerability is a missing authorization issue in Azure CycleCloud. An authorized attacker can exploit this to gain elevated privileges over a network without proper checks.

Detection Guidance

Detection requires checking Azure CycleCloud instances for unauthorized privilege escalation attempts. Monitor logs for unusual administrative actions or network requests to Azure CycleCloud endpoints. Use Azure Monitor or Azure Sentinel to track suspicious activity.

Impact Analysis

An attacker could escalate their privileges, potentially gaining unauthorized access to sensitive data or system functions in Azure CycleCloud environments.

Compliance Impact

The vulnerability allows unauthorized privilege escalation in Azure CycleCloud, which could lead to unauthorized access to sensitive data. This may impact compliance with GDPR (data protection) and HIPAA (health data privacy) by enabling unauthorized data exposure or modification.

Mitigation Strategies

Apply the latest security updates from Microsoft for Azure CycleCloud to address the missing authorization issue. Monitor Microsoft's update guide for patches and verify their installation on affected systems.

Hi! I’m here to help you understand CVE-2026-70340. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70