CVE-2026-81349

High7.2 Published on Sep 8, 2026

Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate privileges over a network.

CVSS score7.2 / 10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-78

Vendorsmicrosoft

Affected products

Vendors	Product	Versions
microsoft	azure hdinsight	< 5.1

Vulnerabilities

Microsoft Patches 966 Flaws as Two Windows Zero-Days Come Under Active Attack

Microsoft fixed 966 flaws in record September Patch Tuesday, including two exploited Windows privilege-escalation zero-days leading to SYSTEM access.

Sep 8, 202621:34 6 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

Microsoft Patches 966 Flaws as Two Windows Zero-Days Come Under Active Attack