CVE-2026-50516
CriticalCVSS 9.4Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
A missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
An attacker could gain elevated privileges, potentially leading to full control over the Kubernetes cluster.
Recommendation
Install security updates for Microsoft Azure Kubernetes Service and enforce strong authentication.
Other vulnerabilities in Microsoft Azure Kubernetes Service
See all- CVE-2026-56163Critical
Missing authentication for a critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
- CVE-2024-21403Critical
A vulnerability in Microsoft Azure Kubernetes Service Confidential Container allows elevation of privilege. An attacker could exploit it to gain higher privileges in the confidential container environment.
- CVE-2024-21376Critical
A vulnerability in Microsoft Azure Kubernetes Service Confidential Container allows remote code execution. An attacker could exploit it to execute arbitrary code within the confidential container context.
- CVE-2026-32193High
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service allows an authorized attacker to execute code locally.
Original NVD description (English source)
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS