CVE-2026-100207 — Azure CycleCloud Remote Code Execution Vulnerability

Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally.

Published: 2026-10-13 · CVSS: 7.3 · CVSS 3.1

Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally.

Original CVE JSON · STIX 2.1

Source: CVE Program · Revision ccc9bdb4c4f8cb214cf2c1e7d07daea789e675ef