Microsoft Azure Cyclecloud — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Azure Cyclecloud, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (13)

• CVE-2024-43602 — CVSS 9.9 (critical): Azure CycleCloud Remote Code Execution Vulnerability
• CVE-2026-57969 — CVSS 8.8 (high): Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.
• CVE-2024-29993 — CVSS 8.8 (high): Azure CycleCloud Elevation of Privilege Vulnerability
• CVE-2024-38092 — CVSS 8.8 (high): Azure CycleCloud Elevation of Privilege Vulnerability
• CVE-2024-43469 — CVSS 8.8 (high): Azure CycleCloud Remote Code Execution Vulnerability
• CVE-2026-70340 — CVSS 8.1 (high): Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.
• CVE-2024-38195 — CVSS 7.8 (high): Azure CycleCloud Remote Code Execution Vulnerability
• CVE-2026-77909 — CVSS 7.7 (high): Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network.
• CVE-2022-41085 — CVSS 7.5 (high): Azure CycleCloud Elevation of Privilege Vulnerability
• CVE-2021-33762 — CVSS 7.0 (high): Azure CycleCloud Elevation of Privilege Vulnerability
• CVE-2026-58279 — CVSS 6.5 (medium): Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.
• CVE-2026-65806 — CVSS 6.5 (medium): Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network.
• CVE-2021-36943 — CVSS 4.0 (medium): Azure CycleCloud Elevation of Privilege Vulnerability