May 16, 2026
Microsoft rejected a critical Azure Backup for AKS privilege escalation report. No CVE was issued, but the attack path silently stopped working in May 2026.