CVE-2026-56163
CriticalCVSS 10.0Exploitation Probability (EPSS)
Elevated risk57th percentile - higher than 57% of all known CVEs
Summary
Missing authentication for a critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
An attacker can gain elevated privileges in the AKS cluster, potentially leading to full cluster compromise and control over containers.
Recommendation
Apply security updates from Microsoft for AKS. Implement proper authentication and authorization mechanisms for critical functions.
Other vulnerabilities in Microsoft Azure Kubernetes Service
See all- CVE-2026-50516Critical
A missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
- CVE-2024-21403Critical
A vulnerability in Microsoft Azure Kubernetes Service Confidential Container allows elevation of privilege. An attacker could exploit it to gain higher privileges in the confidential container environment.
- CVE-2024-21376Critical
A vulnerability in Microsoft Azure Kubernetes Service Confidential Container allows remote code execution. An attacker could exploit it to execute arbitrary code within the confidential container context.
- CVE-2026-32193High
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service allows an authorized attacker to execute code locally.
Original NVD description (English source)
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.