HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-70340 — Missing authorization in Azure CycleCloud allows an authorized attacker to eleva...

·Source: NIST NVD

Updated:

Executive Summary

Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

Analysis

Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. CVSS Score: 8.1. Published: 2026-08-11T17:19:11.640.

Indicators of Compromise (1)

CVE (1)
CVE-2026-70340
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 11, 2026. Verified by: NIST.

Related Threats

HIGHVulnerabilityNEW

CISA KEV: Ray-Project Ray — Ray-Project Ray Code Injection Vulnerability

Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray as a development tool may be exposed to this vulnerability exploitable through Firefox and Safari.

CVE-2025-62593Ray-Project Ray
CISA KEV
MEDIUMVulnerabilityNEW

Hacker claims 3.6 million Azure account records stolen from major companies

A threat actor is selling employee databases allegedly stolen from the Microsoft Azure infrastructure of multiple Fortune 500 companies after gaining access using compromised credentials. [...]

BleepingComputer
CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-66792 — A flaw was found in the multicloud-operators-subscription component. This vulner...

A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscription with specific, crafted annotations. Successful exploitation grants the attacker the ability to deploy resources into any namespace with the elevated permissions of the controller's Service Account, potentially leading to

CVE-2026-66792
NIST NVD