Jul 2026: Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
CVE-2026-56163 Published on July 24, 2026
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
Weakness Type
Missing Authentication for Critical Function
The software does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Products Associated with CVE-2026-56163
Want to know whenever a new CVE is published for Microsoft Azure Kubernetes Service? stack.watch will email you.
Affected Versions
Microsoft Azure Kubernetes Service Version - is affected by CVE-2026-56163Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.