Microsoft rejects critical Azure vulnerability report, no CVE issued
Sat May 16 2026
Patch Management
Vulnerability
www.bleepingcomputer.com
A security researcher claims Microsoft quietly fixed an Azure Backup for AKS vulnerability after rejecting his report, and without issuing a CVE. Microsoft disputes the claim, telling BleepingComputer the behavior was expected and that "no product changes were made," despite the researcher documenting a silent fix. [...]