Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
5919 articles · 249482 vulns · 36/41 feeds (7d)
← Back to list
10.0
CVE-2026-83938PATCHED
Microsoft · Azure Kubernetes Configuration Service

Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability

Description

Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network.

Affected Products

VendorProductVersions
MicrosoftAzure Kubernetes Configuration Service-

References

  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83938(vendor-advisory, patch)

Related News (2 articles)

Tier C
VulDB1d ago
CVE-2026-83938 | Microsoft Azure Kubernetes Configuration Service missing authentication
→ No new info (linked only)
Tier A
Microsoft MSRC1d ago
CVE-2026-83938 Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.110.0 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
CISA KEV❌ No
Actively exploited❌ No
Patch available
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83938
CWECWE-306
PublishedOct 22, 2026
Last enriched1d agov2
Trending Score37
Source articles2
Independent2
Info Completeness9/14
Missing: title, epss, kev, exploit, iocs

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-96951EXPKEV
Windows Shell Security Feature Bypass Vulnerability
Trending: 131
CRITICALCVE-2026-105014
Azure Pipelines Remote Code Execution Vulnerability
Trending: 50
CRITICALCVE-2026-110063
VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability
Trending: 50
HIGHCVE-2026-96185
Microsoft Exchange Online Remote Code Execution Vulnerability
Trending: 39
CRITICALCVE-2026-97785
AAD App Proxy Elevation of Privilege Vulnerability
Trending: 37

Pin to Dashboard

Verification

State: verified
Confidence: 0%

Vulnerability Timeline

CVE Published
Oct 22, 2026
Discovered by ZDM
Oct 22, 2026
Updated: description, mitreAttack
Oct 22, 2026
Patch Available
Oct 23, 2026

Version History

v2
Last enriched 1d ago
v2Tier A1d ago

Added vulnerability title, detailed description of the missing authentication vulnerability, and mapped to MITRE ATT&CK technique T1548 (Abuse Elevation Control Mechanism).

descriptionmitreAttack
via Microsoft MSRC
v11d ago

Initial creation