CVE-2026-56163

CriticalCVSS 10.0

Published: 24/07/2026(UTC)Updated: 29/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.92%

57th percentile - higher than 57% of all known CVEs

Summary

Missing authentication for a critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.

Risk Assessment

An attacker can gain elevated privileges in the AKS cluster, potentially leading to full cluster compromise and control over containers.

Recommendation

Apply security updates from Microsoft for AKS. Implement proper authentication and authorization mechanisms for critical functions.

Original NVD description (English source)

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.