Azure Cyclecloud 8 9 1
Monthly
Privilege escalation in Microsoft Azure CycleCloud 8.9.1 allows an authorized (low-privileged) attacker to gain elevated privileges over the network by reaching a critical function that lacks an authentication check (CWE-306). Reported by Microsoft with a patch available and rated CVSS 8.8; there is no public exploit identified at time of analysis and it is not listed in CISA KEV. The flaw enables full compromise of the CycleCloud instance's confidentiality, integrity, and availability, making it a high-priority patch for HPC-orchestration environments.
Privilege escalation in Microsoft Azure CycleCloud allows a network-authenticated low-privileged attacker to elevate their access level by exploiting a missing authorization check (CWE-862). All Azure CycleCloud versions from 1.0.0 up to 8.9.1 are affected, with version 8.9.1 serving as the patched release. Publicly available exploit code exists per SSVC assessment, though EPSS probability remains low at 0.37% (29th percentile), suggesting limited but non-zero exploitation interest.
Privilege escalation in Microsoft Azure CycleCloud 8.9.1 allows an authorized (low-privileged) attacker to gain elevated privileges over the network by reaching a critical function that lacks an authentication check (CWE-306). Reported by Microsoft with a patch available and rated CVSS 8.8; there is no public exploit identified at time of analysis and it is not listed in CISA KEV. The flaw enables full compromise of the CycleCloud instance's confidentiality, integrity, and availability, making it a high-priority patch for HPC-orchestration environments.
Privilege escalation in Microsoft Azure CycleCloud allows a network-authenticated low-privileged attacker to elevate their access level by exploiting a missing authorization check (CWE-862). All Azure CycleCloud versions from 1.0.0 up to 8.9.1 are affected, with version 8.9.1 serving as the patched release. Publicly available exploit code exists per SSVC assessment, though EPSS probability remains low at 0.37% (29th percentile), suggesting limited but non-zero exploitation interest.