CVE-2026-83938: Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability

Published Oct 22, 2026

Updated

Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability

Other sources

Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network.

— Microsoft

Affected Software

2 affected components

Microsoft Azure Kubernetes Configuration Service

Event History

Oct 22, 2026

CVE Published

via Microsoft·02:00 PM

Data Sourced

via Microsoft·02:00 PM

DescriptionSeverityWeaknessAffected Software

CVE Published

via MITRE·09:44 PM

Data Sourced

via MITRE·09:44 PM

DescriptionSeverity

Frequently Asked Questions

What access does an attacker need to exploit this vulnerability?

The vulnerability is exploitable over a network and requires no privileges or user interaction. An unauthorized attacker could elevate privileges by reaching the affected critical function.

What is the potential impact if exploitation succeeds?

Successful exploitation can result in elevated privileges. The supplied severity data indicates high impact to confidentiality, integrity, and availability, with scope changed.

CVE-2026-83938: Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability

Other sources

Affected Software

Event History

Frequently Asked Questions

What access does an attacker need to exploit this vulnerability?

What is the potential impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this vulnerability?

What is the potential impact if exploitation succeeds?