VULNERABILITY INTELLIGENCE

CVE-2026-70340

CVSS score8.8 HIGH

EPSS probability0.80%

CISA KEVNot currently listed

Published2026-08-11

Last modified2026-10-24

Description

Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.