CVE-2026-85891: Microsoft Azure Hdinsight

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network.

Affected products

• Microsoft Azure Hdinsight: from 1.0, before 2606012120 (fixed in 2606012120)

Published 2026-10-13. Last modified 2026-10-13.