CVE-2026-70340

Azure CycleCloud is vulnerable due to a missing authorization flaw that enables an authenticated attacker to escalate their privileges within the network. This could lead to unauthorized access and control over resources, posing significant risks to data integrity and confidentiality. Organizations utilizing Azure CycleCloud should prioritize addressing this vulnerability to mitigate potential exploitation.