CVE-2026-100207
CVE-2026-100207 · Azure CycleCloud Remote Code Execution Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally.
CVSS 7.3 · High · EPSS 0.4% · Fix available
- Published
- Updated
Affected products and versions
azure cyclecloud 8.9.1
- Versions
- ≥ 1.0.0, < 8.9.2: Affected (custom)
Update to 8.9.2