CVE-2026-102224

HighCVSS 8.4/10Last modified Nov 10, 2026

Description

Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

Metrics

CVSS 3.1 8.4/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 10, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1022258.8Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.CVE-2026-1022268.8Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker toCVE-2026-1022277.8Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.CVE-2026-1022296.8Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to discloCVE-2026-102236.3A weakness has been identified in NousResearch hermes-agent up to 2026.4.30. This affects the function _scan_memory_content of the file toolCVE-2026-1022307.4Missing authorization in Visual Studio Code allows an unauthorized attacker to disclose information over a network.CVE-2026-1022317.7Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.CVE-2026-1022327.0Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.CVE-2026-1022337.8Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.CVE-2026-1022347.5Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over CVE-2026-1022358.8Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.CVE-2026-1022368.6Improper restriction of rendered ui layers or frames in Visual Studio Code allows an unauthorized attacker to bypass a security feature loca
CVE-2026-102224: High severity, CVSS 8.4 | Vulnix