CVE-2026-122986
HIGHCVSS 7.8/10
Last modified
CVE-2026-122986 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Improper privilege management in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges locally..
Description
Improper privilege management in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges locally.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | kernel-mshv-6.6.137.mshv2-2.azl3.x86_64 | >= 1.0.0, < kernel-mshv-6.6.18.34.mshv3-2.azl3.x86_64 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-122986?
Improper privilege management in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges locally.
How severe is CVE-2026-122986?
CVE-2026-122986 has a CVSS score of 7.8/10 (HIGH severity).
How do I fix CVE-2026-122986?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-12296Sandbox escape in the Security: Process Sandboxing component…9.6
- CVE-2026-12297Sandbox escape due to incorrect boundary conditions in the N…9.6
- CVE-2026-122979Improper control of generation of code ('code injection') in…8.1
- CVE-2026-12298Memory safety bug fixed in Thunderbird 152. This vulnerabili…5.4
- CVE-2026-122984Heap-based buffer overflow in Windows Universal Disk Format …7.8
- CVE-2026-122985Improper restriction of xml external entity reference in Mic…6.1
- CVE-2026-122987Missing authentication for critical function in Microsoft Hi…5.9
- CVE-2026-122988Improper authorization in Windows Admin Center allows an aut…8
- CVE-2026-12299JIT miscompilation in the DOM: Core & HTML component. This v…5.4
- CVE-2026-122992In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6,…9.2
- CVE-2026-1230GitLab has remediated an issue in GitLab CE/EE affecting all…6.5
- CVE-2026-12300Memory safety bug fixed in Thunderbird 152. This vulnerabili…5.3
Are you affected by CVE-2026-122986?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST