azure_hdinsight vulnerabilities
CVEs whose affected-version data names the azure_hdinsight package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-85891High· 7.5Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network.
Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network.
▾ TwilightMicrosoft · Azure HDInsightEPSS 0.92%via NVD
CVE-2026-81349High· 7.2Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate privileges over a network.
Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate privileges over a network.
▾ Twilightmicrosoft · azure_hdinsightEPSS 1.0%via NVD