CVE Catalog

CVE-2026-65806

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.58%

45th percentile - higher than 45% of all known CVEs

Summary

Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network.

Risk Assessment

An authorized user could access data they should not have permissions for, potentially leading to information disclosure.

Recommendation

Implement proper authorization and access control mechanisms in Azure CycleCloud.

Original NVD description (English source)

Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS