CVE-2026-50516

Published August 11, 2026 · Source: nvd

Analysis

## Summary
CVE-2026-50516 describes missing authentication for a critical function in Microsoft Azure Kubernetes Service (AKS), enabling an unauthorized network-based attacker to elevate privileges.

The issue is classified as critical with CVSS 9.4 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) and maps to CWE-306 (Missing Authentication for Critical Function).

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Weakness

CWE-306

Affected Products

• microsoft — azure kubernetes service (-)

References

• [email protected]

← Browse all CVEs