BaselineWatch
Desk

CVE-2026-83938

10.0 critical SSVC exploitation: none Published

Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network.

Fix

Vendor advisories in the News 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 6

  1. StatusAwaiting Analysis → PublishedNVD modified 2026-10-26 10:17
  2. StatusPublished → Awaiting AnalysisNVD modified 2026-10-26 11:16
  3. StatusAwaiting Analysis → PublishedNVD modified 2026-10-23 17:42
  4. StatusPublished → Awaiting AnalysisNVD modified 2026-10-23 19:43
  5. StatusReceived → PublishedNVD modified 2026-10-22 21:44
  6. First seenCVSS 10.0NVD modified 2026-10-22 22:19

Affected (CPE criteria) 0

NVD has not attached CPE configurations yet.

References 1