Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network.
Fix
Vendor advisories in the News 1
- Microsoft October 2026 Security Updates: 1476 CVEs, 1 exploited, 96 critical Microsoft Security Update Guide · 2026-10-13
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 6
- StatusAwaiting Analysis → PublishedNVD modified 2026-10-26 10:17
- StatusPublished → Awaiting AnalysisNVD modified 2026-10-26 11:16
- StatusAwaiting Analysis → PublishedNVD modified 2026-10-23 17:42
- StatusPublished → Awaiting AnalysisNVD modified 2026-10-23 19:43
- StatusReceived → PublishedNVD modified 2026-10-22 21:44
- First seenCVSS 10.0NVD modified 2026-10-22 22:19
Affected (CPE criteria) 0
NVD has not attached CPE configurations yet.