CVE-2026-50516

Microsoft · Published August 6, 2026

9.4

CVSS v3.1

CRITICAL

Patch availableGet patch

Description

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability. Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.

Affected Products

Azure Kubernetes Service

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C