Connected evidence
Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.
Release 2026-04-02
Lead record- Why these records are connected
- Records explicitly naming the same CVE identifier.
- Connection key
cve:CVE-2026-27142- Public snapshot refreshed
- today 02:45 UTC
- Distinct source events
- 3
- Source records represented
- 3
Current snapshot membership is shown here. Source histories and cited revisions remain on each record. Future source targets are labelled separately from observed changes. Browse connections.
Evidence in chronological order
- Thu 9 Apr · Dated source evidence · Tool release Release 2026-04-02Azure Kubernetes Service release notes Source: Azure Kubernetes Service release notes · source check: 14 Nov 21:25 UTCYour review: not selected in your watchlist or stack; no review is inferred.Release notes name CVE-2025-15558, CVE-2026-24051, CVE-2026-33186
- Thu 4 Jun · Dated source evidence · Tool release Release 2026-05-29Azure Kubernetes Service release notes Source: Azure Kubernetes Service release notes · source check: 14 Nov 21:25 UTCYour review: not selected in your watchlist or stack; no review is inferred.Release notes name CVE-2026-27140, CVE-2026-27143, CVE-2026-27144
- Sun 1 Nov · Dated source evidence · Advisory content revised Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturles…EUVD-2026-10088 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Advisory content revised; observed by ChangeIntel, not the original publication date.