Microsoft rejects critical Azure vulnerability report, no CVE issued
Over Security - Cybersecurity news aggregator [Unofficial]
May 16, 2026
A security researcher claims Microsoft quietly fixed an Azure Backup for AKS vulnerability after rejecting his report, and without issuing a CVE. Microsoft disputes the claim, telling BleepingComputer the behavior was expected and that "no product changes were made," despite the researcher documenting a silent fix.
Discussion in the ATmosphere