Oct 2026: Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability
CVE-2026-83938 Published on October 22, 2026

Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability
Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network.

Vendor Advisory NVD

Weakness Type

Missing Authentication for Critical Function

The software does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.


Products Associated with CVE-2026-83938

Want to know whenever a new CVE is published for Microsoft Azure Kubernetes Configuration Service? stack.watch will email you.

Microsoft Azure Kubernetes Configuration Service
 

Affected Versions

Microsoft Azure Kubernetes Configuration Service Version - is affected by CVE-2026-83938