Microsoft Security Response Center guidance
Vendor revision: Jul 14, 2026Release Notes
Vendor-listed releases
- 8.9.1
Vulnerability intelligence
CVE-2026-57969 and is rated High severity with a CVSS score of 8.8. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
Release Notes
Vendor-listed releases
Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.
Source: NVD