Information Disclosure Vulnerability in Azure CycleCloud by Microsoft
CVE-2026-65806

6.5MEDIUM

Key Information:

Vendor

Microsoft
Status
Azure Cyclecloud 8.9.2
Vendor
CVE Published:
11 August 2026

What is CVE-2026-65806?

An information disclosure vulnerability exists in Azure CycleCloud due to missing authorization mechanisms. This flaw could allow an authorized attacker to gain unauthorized access to sensitive information over a network, potentially exposing confidential data. Organizations using Azure CycleCloud should review their configurations and apply available patches to mitigate the risks associated with this vulnerability.

Affected Version(s)

Azure CycleCloud 8.9.2 8.9.2

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.