Unauthorized Access to Azure Kubernetes Configuration Service
CVE-2026-83938

10CRITICAL

Key Information:

Vendor

Microsoft

Vendor
CVE Published:
22 October 2026

What is CVE-2026-83938?

The Azure Kubernetes Configuration Service is susceptible to a vulnerability that permits unauthorized attackers to gain elevated privileges over a network due to missing authentication in a critical function. This flaw enables potential adversaries to manipulate settings and access resources that should be securely protected. Organizations using this service must be vigilant and apply updates promptly to mitigate risks associated with this vulnerability. Comprehensive security practices and regular audits are essential to ensure that cloud infrastructures remain resilient.

Affected Version(s)

Azure Kubernetes Configuration Service -

References

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.