Search
Find a vulnerability
Search criteria
115 vulnerabilities by hitachi
CVE-2026-91758 (GCVE-0-2026-91758)
Vulnerability from cvelistv5 – Published: 2026-11-10 04:44 – Updated: 2026-11-10 04:44
VLAI
EPSS
VEX
Title
Out-of-bounds Read and Write Vulnerability in Hitachi Dynamic Link Manager for Linux
Summary
Out-of-bounds Read and Write Vulnerability in Hitachi Dynamic Link Manager for Linux.
This issue affects Hitachi Dynamic Link Manager for Linux: from 7.5.0-00 before 9.0.5-00.
Severity
7.8 (High)
CWE
- CWE-131 - Incorrect calculation of buffer size
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | Hitachi Dynamic Link Manager for Linux |
Affected:
7.5.0-00 , < 9.0.5-00
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Linux"
],
"product": "Hitachi Dynamic Link Manager for Linux",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "9.0.5-00",
"status": "unaffected"
}
],
"lessThan": "9.0.5-00",
"status": "affected",
"version": "7.5.0-00",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Out-of-bounds Read and Write Vulnerability in Hitachi Dynamic Link Manager for Linux.\u003cp\u003eThis issue affects Hitachi Dynamic Link Manager for Linux: from 7.5.0-00 before 9.0.5-00.\u003c/p\u003e"
}
],
"value": "Out-of-bounds Read and Write Vulnerability in Hitachi Dynamic Link Manager for Linux.\n\nThis issue affects Hitachi Dynamic Link Manager for Linux: from 7.5.0-00 before 9.0.5-00."
}
],
"impacts": [
{
"capecId": "CAPEC-100",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-100 Overflow Buffers"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-131",
"description": "CWE-131 Incorrect calculation of buffer size",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T04:44:48.200Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-166/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-166",
"discovery": "UNKNOWN"
},
"title": "Out-of-bounds Read and Write Vulnerability in Hitachi Dynamic Link Manager for Linux",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-91758",
"datePublished": "2026-11-10T04:44:48.200Z",
"dateReserved": "2026-09-15T00:22:27.971Z",
"dateUpdated": "2026-11-10T04:44:48.200Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-91759 (GCVE-0-2026-91759)
Vulnerability from cvelistv5 – Published: 2026-11-10 04:44 – Updated: 2026-11-10 04:44
VLAI
EPSS
VEX
Title
Out-of-Bounds Write Vulnerability in Hitachi Dynamic Link Manager for Linux
Summary
Out-of-Bounds Write Vulnerability in Hitachi Dynamic Link Manager for Linux.
This issue affects Hitachi Dynamic Link Manager for Linux: from 7.5.0-00 before 9.0.5-00.
Severity
7.8 (High)
CWE
- CWE-787 - Out-of-bounds write
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | Hitachi Dynamic Link Manager for Linux |
Affected:
7.5.0-00 , < 9.0.5-00
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Linux"
],
"product": "Hitachi Dynamic Link Manager for Linux",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "9.0.5-00",
"status": "unaffected"
}
],
"lessThan": "9.0.5-00",
"status": "affected",
"version": "7.5.0-00",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Out-of-Bounds Write Vulnerability in Hitachi Dynamic Link Manager for Linux.\u003cbr\u003e\u003cp\u003eThis issue affects Hitachi Dynamic Link Manager for Linux: from 7.5.0-00 before 9.0.5-00.\u003c/p\u003e"
}
],
"value": "Out-of-Bounds Write Vulnerability in Hitachi Dynamic Link Manager for Linux.\n\n\nThis issue affects Hitachi Dynamic Link Manager for Linux: from 7.5.0-00 before 9.0.5-00."
}
],
"impacts": [
{
"capecId": "CAPEC-100",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-100 Overflow Buffers"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787 Out-of-bounds write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T04:44:47.348Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-166/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-166",
"discovery": "UNKNOWN"
},
"title": "Out-of-Bounds Write Vulnerability in Hitachi Dynamic Link Manager for Linux",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-91759",
"datePublished": "2026-11-10T04:44:47.348Z",
"dateReserved": "2026-09-15T00:22:27.972Z",
"dateUpdated": "2026-11-10T04:44:47.348Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-91760 (GCVE-0-2026-91760)
Vulnerability from cvelistv5 – Published: 2026-11-10 04:44 – Updated: 2026-11-10 04:44
VLAI
EPSS
VEX
Title
Heap-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for Linux
Summary
Heap-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for Linux.
This issue affects Hitachi Dynamic Link Manager for Linux: from 7.5.0-00 before 9.0.5-00.
Severity
CWE
- CWE-122 - Heap-based buffer overflow
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | Hitachi Dynamic Link Manager for Linux |
Affected:
7.5.0-00 , < 9.0.5-00
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Linux"
],
"product": "Hitachi Dynamic Link Manager for Linux",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "9.0.5-00",
"status": "unaffected"
}
],
"lessThan": "9.0.5-00",
"status": "affected",
"version": "7.5.0-00",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Heap-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for Linux.\u003cbr\u003e\u003cp\u003eThis issue affects Hitachi Dynamic Link Manager for Linux: from 7.5.0-00 before 9.0.5-00.\u003c/p\u003e"
}
],
"value": "Heap-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for Linux.\n\n\nThis issue affects Hitachi Dynamic Link Manager for Linux: from 7.5.0-00 before 9.0.5-00."
}
],
"impacts": [
{
"capecId": "CAPEC-100",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-100 Overflow Buffers"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122 Heap-based buffer overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T04:44:46.488Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-166/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-166",
"discovery": "UNKNOWN"
},
"title": "Heap-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for Linux",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-91760",
"datePublished": "2026-11-10T04:44:46.488Z",
"dateReserved": "2026-09-15T00:22:27.972Z",
"dateUpdated": "2026-11-10T04:44:46.488Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-91764 (GCVE-0-2026-91764)
Vulnerability from cvelistv5 – Published: 2026-11-10 04:44 – Updated: 2026-11-10 04:44
VLAI
EPSS
VEX
Title
Improper Link Resolution Before File Access Vulnerability in Hitachi Dynamic Link Manager for Linux
Summary
Improper Link Resolution Before File Access Vulnerability in Hitachi Dynamic Link Manager for Linux.
This issue affects Hitachi Dynamic Link Manager for Linux: from 6.1.1.-00 before 9.0.5-00.
Severity
8.1 (High)
CWE
- CWE-59 - Improper link resolution before file access ('link following')
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | Hitachi Dynamic Link Manager for Linux |
Affected:
6.1.1.-00 , < 9.0.5-00
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Linux"
],
"product": "Hitachi Dynamic Link Manager for Linux",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "9.0.5-00",
"status": "unaffected"
}
],
"lessThan": "9.0.5-00",
"status": "affected",
"version": "6.1.1.-00",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Improper Link Resolution Before File Access Vulnerability in Hitachi Dynamic Link Manager for Linux.\u003cbr\u003e\u003cp\u003eThis issue affects Hitachi Dynamic Link Manager for Linux: from 6.1.1.-00 before 9.0.5-00.\u003c/p\u003e"
}
],
"value": "Improper Link Resolution Before File Access Vulnerability in Hitachi Dynamic Link Manager for Linux.\n\n\nThis issue affects Hitachi Dynamic Link Manager for Linux: from 6.1.1.-00 before 9.0.5-00."
}
],
"impacts": [
{
"capecId": "CAPEC-132",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-132 Symlink Attack"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-59",
"description": "CWE-59 Improper link resolution before file access (\u0027link following\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T04:44:45.622Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-166/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-166",
"discovery": "UNKNOWN"
},
"title": "Improper Link Resolution Before File Access Vulnerability in Hitachi Dynamic Link Manager for Linux",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-91764",
"datePublished": "2026-11-10T04:44:45.622Z",
"dateReserved": "2026-09-15T00:22:27.972Z",
"dateUpdated": "2026-11-10T04:44:45.622Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-115646 (GCVE-0-2026-115646)
Vulnerability from cvelistv5 – Published: 2026-11-10 04:44 – Updated: 2026-11-10 04:44
VLAI
EPSS
VEX
Title
Partial String Comparison Vulnerability in HiRDB
Summary
Partial String Comparison Vulnerability in HiRDB.
This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-50-06 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-50-/F through 09-66/V; HiRDB Server Version 9(32): from 09-50-06 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-50-/F through 09-66-/V.
Severity
9.8 (Critical)
CWE
- CWE-187 - Partial string comparison
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | HiRDB Server Version 10 |
Affected:
10-00 , < 10-12-01
(custom)
|
|
| Hitachi | HiRDB Server Version 9 |
Affected:
09-50-06 , ≤ 09-66-22
(custom)
|
|
| Hitachi | HiRDB Server with Additional Function Version 9 |
Affected:
09-50-/F , ≤ 09-66/V
(custom)
|
|
| Hitachi | HiRDB Server Version 9(32) |
Affected:
09-50-06 , ≤ 09-66-22
(custom)
|
|
| Hitachi | HiRDB Server with Additional Function Version 9(32) |
Affected:
09-50-/F , ≤ 09-66-/V
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "HiRDB Server Version 10",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "10-12-01",
"status": "unaffected"
},
{
"at": "10-11-02",
"status": "unaffected"
},
{
"at": "10-08-05",
"status": "unaffected"
}
],
"lessThan": "10-12-01",
"status": "affected",
"version": "10-00",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server Version 9",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66-22",
"status": "affected",
"version": "09-50-06",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server with Additional Function Version 9",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66/V",
"status": "affected",
"version": "09-50-/F",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server Version 9(32)",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66-22",
"status": "affected",
"version": "09-50-06",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server with Additional Function Version 9(32)",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66-/V",
"status": "affected",
"version": "09-50-/F",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Partial String Comparison Vulnerability in HiRDB.\u003cbr\u003e\u003cp\u003eThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-50-06 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-50-/F through 09-66/V; HiRDB Server Version 9(32): from 09-50-06 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-50-/F through 09-66-/V.\u003c/p\u003e"
}
],
"value": "Partial String Comparison Vulnerability in HiRDB.\n\n\nThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-50-06 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-50-/F through 09-66/V; HiRDB Server Version 9(32): from 09-50-06 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-50-/F through 09-66-/V."
}
],
"impacts": [
{
"capecId": "CAPEC-115",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-115 Authentication Bypass"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-187",
"description": "CWE-187 Partial string comparison",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T04:44:44.767Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-165/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-165",
"discovery": "UNKNOWN"
},
"title": "Partial String Comparison Vulnerability in HiRDB",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-115646",
"datePublished": "2026-11-10T04:44:44.767Z",
"dateReserved": "2026-10-23T06:44:09.350Z",
"dateUpdated": "2026-11-10T04:44:44.767Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-91761 (GCVE-0-2026-91761)
Vulnerability from cvelistv5 – Published: 2026-11-10 04:44 – Updated: 2026-11-10 04:44
VLAI
EPSS
VEX
Title
Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for Linux
Summary
UNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux.
This issue affects Hitachi Dynamic Link Manager for Linux: from 8.6.2.-00 before 9.0.5-00.
Severity
8.2 (High)
CWE
- CWE-61 - UNIX symbolic link (symlink) following
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | Hitachi Dynamic Link Manager for Linux |
Affected:
8.6.2.-00 , < 9.0.5-00
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Linux"
],
"product": "Hitachi Dynamic Link Manager for Linux",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "9.0.5-00",
"status": "unaffected"
}
],
"lessThan": "9.0.5-00",
"status": "affected",
"version": "8.6.2.-00",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "UNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux.\u003cp\u003eThis issue affects Hitachi Dynamic Link Manager for Linux: from 8.6.2.-00 before 9.0.5-00.\u003c/p\u003e"
}
],
"value": "UNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux.\n\nThis issue affects Hitachi Dynamic Link Manager for Linux: from 8.6.2.-00 before 9.0.5-00."
}
],
"impacts": [
{
"capecId": "CAPEC-132",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-132 Symlink Attack"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-61",
"description": "CWE-61 UNIX symbolic link (symlink) following",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T04:44:43.920Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-166/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-166",
"discovery": "UNKNOWN"
},
"title": "Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for Linux",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-91761",
"datePublished": "2026-11-10T04:44:43.920Z",
"dateReserved": "2026-09-15T00:22:27.972Z",
"dateUpdated": "2026-11-10T04:44:43.920Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-91762 (GCVE-0-2026-91762)
Vulnerability from cvelistv5 – Published: 2026-11-10 04:44 – Updated: 2026-11-10 04:44
VLAI
EPSS
VEX
Title
Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for Linux
Summary
UNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux.
This issue affects Hitachi Dynamic Link Manager for Linux: from 8.5.3.-00 before 9.0.5-00.
Severity
7.9 (High)
CWE
- CWE-61 - UNIX symbolic link (symlink) following
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | Hitachi Dynamic Link Manager for Linux |
Affected:
8.5.3.-00 , < 9.0.5-00
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Linux"
],
"product": "Hitachi Dynamic Link Manager for Linux",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "9.0.5-00",
"status": "unaffected"
}
],
"lessThan": "9.0.5-00",
"status": "affected",
"version": "8.5.3.-00",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "UNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux.\u003cbr\u003e\u003cp\u003eThis issue affects Hitachi Dynamic Link Manager for Linux: from 8.5.3.-00 before 9.0.5-00.\u003c/p\u003e"
}
],
"value": "UNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux.\n\n\nThis issue affects Hitachi Dynamic Link Manager for Linux: from 8.5.3.-00 before 9.0.5-00."
}
],
"impacts": [
{
"capecId": "CAPEC-132",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-132 Symlink Attack"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.9,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-61",
"description": "CWE-61 UNIX symbolic link (symlink) following",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T04:44:43.002Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-166/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-166",
"discovery": "UNKNOWN"
},
"title": "Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for Linux",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-91762",
"datePublished": "2026-11-10T04:44:43.002Z",
"dateReserved": "2026-09-15T00:22:27.972Z",
"dateUpdated": "2026-11-10T04:44:43.002Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-91763 (GCVE-0-2026-91763)
Vulnerability from cvelistv5 – Published: 2026-11-10 04:44 – Updated: 2026-11-10 04:44
VLAI
EPSS
VEX
Title
Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for Linux
Summary
UNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux.
This issue affects Hitachi Dynamic Link Manager for Linux: from 8.6.2.-00 before 9.0.5-00.
Severity
8.2 (High)
CWE
- CWE-61 - UNIX symbolic link (symlink) following
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | Hitachi Dynamic Link Manager for Linux |
Affected:
8.6.2.-00 , < 9.0.5-00
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Linux"
],
"product": "Hitachi Dynamic Link Manager for Linux",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "9.0.5-00",
"status": "unaffected"
}
],
"lessThan": "9.0.5-00",
"status": "affected",
"version": "8.6.2.-00",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eUNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux.\u003cbr\u003eThis issue affects Hitachi Dynamic Link Manager for Linux: from 8.6.2.-00 before 9.0.5-00.\u003c/p\u003e"
}
],
"value": "UNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux.\nThis issue affects Hitachi Dynamic Link Manager for Linux: from 8.6.2.-00 before 9.0.5-00."
}
],
"impacts": [
{
"capecId": "CAPEC-132",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-132 Symlink Attack"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-61",
"description": "CWE-61 UNIX symbolic link (symlink) following",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T04:44:41.956Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-166/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-166",
"discovery": "UNKNOWN"
},
"title": "Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for Linux",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-91763",
"datePublished": "2026-11-10T04:44:41.956Z",
"dateReserved": "2026-09-15T00:22:27.972Z",
"dateUpdated": "2026-11-10T04:44:41.956Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-92864 (GCVE-0-2026-92864)
Vulnerability from cvelistv5 – Published: 2026-11-10 04:44 – Updated: 2026-11-10 04:44
VLAI
EPSS
VEX
Title
Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for AIX (for markets outside Japan) and Hitachi Dynamic Link Manager EX for AIX (for the Japanese market)
Summary
Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for AIX (for markets outside Japan) and Hitachi Dynamic Link Manager EX for AIX (for the Japanese market).
This issue affects Hitachi Dynamic Link Manager for AIX: from 7.4.1-00 before 9.0.4-01; Hitachi Dynamic Link Manager EX for AIX: from 7.4.1-00 before 9.0.4-01.
Severity
7.3 (High)
CWE
- CWE-61 - UNIX symbolic link (symlink) following
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | Hitachi Dynamic Link Manager for AIX |
Affected:
7.4.1-00 , < 9.0.4-01
(custom)
|
|
| Hitachi | Hitachi Dynamic Link Manager EX for AIX |
Affected:
7.4.1-00 , < 9.0.4-01
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Hitachi Dynamic Link Manager for AIX",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "9.0.4-01",
"status": "unaffected"
}
],
"lessThan": "9.0.4-01",
"status": "affected",
"version": "7.4.1-00",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Hitachi Dynamic Link Manager EX for AIX",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "9.0.4-01",
"status": "unaffected"
}
],
"lessThan": "9.0.4-01",
"status": "affected",
"version": "7.4.1-00",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for AIX (for markets outside Japan) and Hitachi Dynamic Link Manager EX for AIX (for the Japanese market).\u003cp\u003eThis issue affects Hitachi Dynamic Link Manager for AIX: from 7.4.1-00 before 9.0.4-01; Hitachi Dynamic Link Manager EX for AIX: from 7.4.1-00 before 9.0.4-01.\u003c/p\u003e"
}
],
"value": "Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for AIX (for markets outside Japan) and Hitachi Dynamic Link Manager EX for AIX (for the Japanese market).\n\nThis issue affects Hitachi Dynamic Link Manager for AIX: from 7.4.1-00 before 9.0.4-01; Hitachi Dynamic Link Manager EX for AIX: from 7.4.1-00 before 9.0.4-01."
}
],
"impacts": [
{
"capecId": "CAPEC-132",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-132 Symlink Attack"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-61",
"description": "CWE-61 UNIX symbolic link (symlink) following",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T04:44:41.081Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-164/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-164",
"discovery": "UNKNOWN"
},
"title": "Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for AIX (for markets outside Japan) and Hitachi Dynamic Link Manager EX for AIX (for the Japanese market)",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-92864",
"datePublished": "2026-11-10T04:44:41.081Z",
"dateReserved": "2026-09-17T06:05:32.872Z",
"dateUpdated": "2026-11-10T04:44:41.081Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-112125 (GCVE-0-2026-112125)
Vulnerability from cvelistv5 – Published: 2026-11-10 04:44 – Updated: 2026-11-10 04:44
VLAI
EPSS
VEX
Title
Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor
Summary
Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor.
This issue affects HA Monitor: from 01-00 before 01-83-01.
Severity
7.3 (High)
CWE
- CWE-732 - Incorrect Permission Assignment for Critical Resource
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | HA Monitor |
Affected:
01-00 , < 01-83-01
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "HA Monitor",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "01-83-01",
"status": "unaffected"
},
{
"at": "01-77-02",
"status": "unaffected"
},
{
"at": "01-70-01",
"status": "unaffected"
},
{
"at": "01-58-02",
"status": "unaffected"
},
{
"at": "01-42-02",
"status": "unaffected"
},
{
"at": "01-35-02",
"status": "unaffected"
},
{
"at": "01-34-01",
"status": "unaffected"
}
],
"lessThan": "01-83-01",
"status": "affected",
"version": "01-00",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor.\u003cp\u003eThis issue affects HA Monitor: from 01-00 before 01-83-01.\u003c/p\u003e"
}
],
"value": "Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor.\n\nThis issue affects HA Monitor: from 01-00 before 01-83-01."
}
],
"impacts": [
{
"capecId": "CAPEC-180",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-732",
"description": "CWE-732 Incorrect Permission Assignment for Critical Resource",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T04:44:40.152Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-163/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-163",
"discovery": "UNKNOWN"
},
"title": "Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-112125",
"datePublished": "2026-11-10T04:44:40.152Z",
"dateReserved": "2026-10-19T04:18:01.241Z",
"dateUpdated": "2026-11-10T04:44:40.152Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-92863 (GCVE-0-2026-92863)
Vulnerability from cvelistv5 – Published: 2026-11-10 04:44 – Updated: 2026-11-10 04:44
VLAI
EPSS
VEX
Title
Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for AIX (for the Japanese market)
Summary
Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for AIX (for the Japanese market).
This issue affects Hitachi Dynamic Link Manager for AIX: before 9.0.4-01.
Severity
CWE
- CWE-190 - Integer overflow or wraparound
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | Hitachi Dynamic Link Manager for AIX |
Affected:
0 , < 9.0.4-01
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Hitachi Dynamic Link Manager for AIX",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "9.0.4-01",
"status": "unaffected"
}
],
"lessThan": "9.0.4-01",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for AIX (for the Japanese market).\u003cp\u003eThis issue affects Hitachi Dynamic Link Manager for AIX: before 9.0.4-01.\u003c/p\u003e"
}
],
"value": "Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for AIX (for the Japanese market).\n\nThis issue affects Hitachi Dynamic Link Manager for AIX: before 9.0.4-01."
}
],
"impacts": [
{
"capecId": "CAPEC-100",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-100 Overflow Buffers"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-190",
"description": "CWE-190 Integer overflow or wraparound",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T04:44:39.292Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-162/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-162",
"discovery": "UNKNOWN"
},
"title": "Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for AIX (for the Japanese market)",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-92863",
"datePublished": "2026-11-10T04:44:39.292Z",
"dateReserved": "2026-09-17T06:05:32.872Z",
"dateUpdated": "2026-11-10T04:44:39.292Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-91754 (GCVE-0-2026-91754)
Vulnerability from cvelistv5 – Published: 2026-11-10 04:44 – Updated: 2026-11-10 04:44
VLAI
EPSS
VEX
Title
Stack-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware
Summary
Stack-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware.
This issue affects Hitachi Dynamic Link Manager for VMware: from 8.7.3-00 before 9.0.4-01.
Severity
8.1 (High)
CWE
- CWE-121 - Stack-based buffer overflow
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | Hitachi Dynamic Link Manager for VMware |
Affected:
8.7.3-00 , < 9.0.4-01
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Hitachi Dynamic Link Manager for VMware",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "9.0.4-01",
"status": "unaffected"
}
],
"lessThan": "9.0.4-01",
"status": "affected",
"version": "8.7.3-00",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Stack-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware.\u003cp\u003eThis issue affects Hitachi Dynamic Link Manager for VMware: from 8.7.3-00 before 9.0.4-01.\u003c/p\u003e"
}
],
"value": "Stack-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware.\n\nThis issue affects Hitachi Dynamic Link Manager for VMware: from 8.7.3-00 before 9.0.4-01."
}
],
"impacts": [
{
"capecId": "CAPEC-100",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-100 Overflow Buffers"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "CWE-121 Stack-based buffer overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T04:44:38.379Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-161/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-161",
"discovery": "UNKNOWN"
},
"title": "Stack-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-91754",
"datePublished": "2026-11-10T04:44:38.379Z",
"dateReserved": "2026-09-15T00:22:27.971Z",
"dateUpdated": "2026-11-10T04:44:38.379Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-91755 (GCVE-0-2026-91755)
Vulnerability from cvelistv5 – Published: 2026-11-10 04:44 – Updated: 2026-11-10 04:44
VLAI
EPSS
VEX
Title
Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware
Summary
Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware.
This issue affects Hitachi Dynamic Link Manager for VMware: from 8.7.3-00 before 9.0.4-01.
Severity
8.1 (High)
CWE
- CWE-190 - Integer overflow or wraparound
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | Hitachi Dynamic Link Manager for VMware |
Affected:
8.7.3-00 , < 9.0.4-01
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Hitachi Dynamic Link Manager for VMware",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "9.0.4-01",
"status": "unaffected"
}
],
"lessThan": "9.0.4-01",
"status": "affected",
"version": "8.7.3-00",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware.\u003cp\u003eThis issue affects Hitachi Dynamic Link Manager for VMware: from 8.7.3-00 before 9.0.4-01.\u003c/p\u003e"
}
],
"value": "Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware.\n\nThis issue affects Hitachi Dynamic Link Manager for VMware: from 8.7.3-00 before 9.0.4-01."
}
],
"impacts": [
{
"capecId": "CAPEC-100",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-100 Overflow Buffers"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-190",
"description": "CWE-190 Integer overflow or wraparound",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T04:44:37.343Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-161/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-161",
"discovery": "UNKNOWN"
},
"title": "Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-91755",
"datePublished": "2026-11-10T04:44:37.343Z",
"dateReserved": "2026-09-15T00:22:27.971Z",
"dateUpdated": "2026-11-10T04:44:37.343Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-91756 (GCVE-0-2026-91756)
Vulnerability from cvelistv5 – Published: 2026-11-10 04:44 – Updated: 2026-11-10 04:44
VLAI
EPSS
VEX
Title
OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware
Summary
OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware.
This issue affects Hitachi Dynamic Link Manager for VMware: from 8.7.3-00 before 9.0.4-01.
Severity
8.1 (High)
CWE
- CWE-78 - Improper neutralization of special elements used in an OS command ('OS command injection')
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | Hitachi Dynamic Link Manager for VMware |
Affected:
8.7.3-00 , < 9.0.4-01
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Hitachi Dynamic Link Manager for VMware",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "9.0.4-01",
"status": "unaffected"
}
],
"lessThan": "9.0.4-01",
"status": "affected",
"version": "8.7.3-00",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware.\u003cp\u003eThis issue affects Hitachi Dynamic Link Manager for VMware: from 8.7.3-00 before 9.0.4-01.\u003c/p\u003e"
}
],
"value": "OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware.\n\nThis issue affects Hitachi Dynamic Link Manager for VMware: from 8.7.3-00 before 9.0.4-01."
}
],
"impacts": [
{
"capecId": "CAPEC-248",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-248 Command Injection"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78 Improper neutralization of special elements used in an OS command (\u0027OS command injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T04:44:36.486Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-161/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-161",
"discovery": "UNKNOWN"
},
"title": "OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-91756",
"datePublished": "2026-11-10T04:44:36.486Z",
"dateReserved": "2026-09-15T00:22:27.971Z",
"dateUpdated": "2026-11-10T04:44:36.486Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-91757 (GCVE-0-2026-91757)
Vulnerability from cvelistv5 – Published: 2026-11-10 04:44 – Updated: 2026-11-10 04:44
VLAI
EPSS
VEX
Title
OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware
Summary
OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware.
This issue affects Hitachi Dynamic Link Manager for VMware: from 7.3.0-00 before 9.0.4-01.
Severity
7.1 (High)
CWE
- CWE-78 - Improper neutralization of special elements used in an OS command ('OS command injection')
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | Hitachi Dynamic Link Manager for VMware |
Affected:
7.3.0-00 , < 9.0.4-01
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Hitachi Dynamic Link Manager for VMware",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "9.0.4-01",
"status": "unaffected"
}
],
"lessThan": "9.0.4-01",
"status": "affected",
"version": "7.3.0-00",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware.\u003cp\u003eThis issue affects Hitachi Dynamic Link Manager for VMware: from 7.3.0-00 before 9.0.4-01.\u003c/p\u003e"
}
],
"value": "OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware.\n\nThis issue affects Hitachi Dynamic Link Manager for VMware: from 7.3.0-00 before 9.0.4-01."
}
],
"impacts": [
{
"capecId": "CAPEC-248",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-248 Command Injection"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78 Improper neutralization of special elements used in an OS command (\u0027OS command injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T04:44:35.623Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-161/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-161",
"discovery": "UNKNOWN"
},
"title": "OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-91757",
"datePublished": "2026-11-10T04:44:35.623Z",
"dateReserved": "2026-09-15T00:22:27.971Z",
"dateUpdated": "2026-11-10T04:44:35.623Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-86578 (GCVE-0-2026-86578)
Vulnerability from cvelistv5 – Published: 2026-11-10 04:44 – Updated: 2026-11-10 04:44
VLAI
EPSS
VEX
Title
Link Following Vulnerability in Hitachi Dynamic Link Manager for Windows
Summary
Link Following Vulnerability in Hitachi Dynamic Link Manager for Windows.
This issue affects Hitachi Dynamic Link Manager for Windows: from 5.0.0-03 before 9.0.4-01.
Severity
7.3 (High)
CWE
- CWE-59 - Improper link resolution before file access ('link following')
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | Hitachi Dynamic Link Manager for Windows |
Affected:
5.0.0-03 , < 9.0.4-01
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Hitachi Dynamic Link Manager for Windows",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "9.0.4-01",
"status": "unaffected"
}
],
"lessThan": "9.0.4-01",
"status": "affected",
"version": "5.0.0-03",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Link Following Vulnerability in Hitachi Dynamic Link Manager for Windows.\u003cp\u003eThis issue affects Hitachi Dynamic Link Manager for Windows: from 5.0.0-03 before 9.0.4-01.\u003c/p\u003e"
}
],
"value": "Link Following Vulnerability in Hitachi Dynamic Link Manager for Windows.\n\nThis issue affects Hitachi Dynamic Link Manager for Windows: from 5.0.0-03 before 9.0.4-01."
}
],
"impacts": [
{
"capecId": "CAPEC-132",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-132 Symlink Attack"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-59",
"description": "CWE-59 Improper link resolution before file access (\u0027link following\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T04:44:34.731Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-160/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-160",
"discovery": "UNKNOWN"
},
"title": "Link Following Vulnerability in Hitachi Dynamic Link Manager for Windows",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-86578",
"datePublished": "2026-11-10T04:44:34.731Z",
"dateReserved": "2026-09-08T05:51:39.552Z",
"dateUpdated": "2026-11-10T04:44:34.731Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-86579 (GCVE-0-2026-86579)
Vulnerability from cvelistv5 – Published: 2026-11-10 04:44 – Updated: 2026-11-10 04:44
VLAI
EPSS
VEX
Title
Binary Planting Vulnerability in Hitachi Dynamic Link Manager for Windows
Summary
Binary Planting Vulnerability in Hitachi Dynamic Link Manager for Windows.
This issue affects Hitachi Dynamic Link Manager for Windows: from 5.9.5-00 before 9.0.4-01.
Severity
8.2 (High)
CWE
- CWE-427 - Uncontrolled Search Path Element
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | Hitachi Dynamic Link Manager for Windows |
Affected:
5.9.5-00 , < 9.0.4-01
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Hitachi Dynamic Link Manager for Windows",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "9.0.4-01",
"status": "unaffected"
}
],
"lessThan": "9.0.4-01",
"status": "affected",
"version": "5.9.5-00",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Binary Planting Vulnerability in Hitachi Dynamic Link Manager for Windows.\u003cp\u003eThis issue affects Hitachi Dynamic Link Manager for Windows: from 5.9.5-00 before 9.0.4-01.\u003c/p\u003e"
}
],
"value": "Binary Planting Vulnerability in Hitachi Dynamic Link Manager for Windows.\n\nThis issue affects Hitachi Dynamic Link Manager for Windows: from 5.9.5-00 before 9.0.4-01."
}
],
"impacts": [
{
"capecId": "CAPEC-17",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-17 Using Malicious Files"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-427",
"description": "CWE-427 Uncontrolled Search Path Element",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T04:44:33.820Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-160/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-160",
"discovery": "UNKNOWN"
},
"title": "Binary Planting Vulnerability in Hitachi Dynamic Link Manager for Windows",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-86579",
"datePublished": "2026-11-10T04:44:33.820Z",
"dateReserved": "2026-09-08T05:51:39.552Z",
"dateUpdated": "2026-11-10T04:44:33.820Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-82117 (GCVE-0-2026-82117)
Vulnerability from cvelistv5 – Published: 2026-10-27 09:37 – Updated: 2026-11-04 14:56
VLAI
EPSS
VEX
Title
Authentication Bypass by Spoofing Vulnerability in HiRDB
Summary
Authentication Bypass by Spoofing Vulnerability in HiRDB.
This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 14:55 UTC
CWE
- CWE-290 - Authentication bypass by spoofing
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | HiRDB Server Version 10 |
Affected:
10-00 , < 10-12-01
(custom)
|
|
| Hitachi | HiRDB Server Version 9 |
Affected:
09-00 , ≤ 09-66-22
(custom)
|
|
| Hitachi | HiRDB Server with Additional Function Version 9 |
Affected:
09-00 , ≤ 09-66/V
(custom)
|
|
| Hitachi | HiRDB Server Version 9(32) |
Affected:
09-02 , ≤ 09-66-22
(custom)
|
|
| Hitachi | HiRDB Server with Additional Function Version 9(32) |
Affected:
09-00 , ≤ 09-66-/V
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-82117",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T14:55:25.983094Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T14:56:11.067Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "HiRDB Server Version 10",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "10-12-01",
"status": "unaffected"
},
{
"at": "10-11-02",
"status": "unaffected"
},
{
"at": "10-08-05",
"status": "unaffected"
}
],
"lessThan": "10-12-01",
"status": "affected",
"version": "10-00",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server Version 9",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66-22",
"status": "affected",
"version": "09-00",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server with Additional Function Version 9",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66/V",
"status": "affected",
"version": "09-00",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server Version 9(32)",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66-22",
"status": "affected",
"version": "09-02",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server with Additional Function Version 9(32)",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66-/V",
"status": "affected",
"version": "09-00",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Authentication Bypass by Spoofing Vulnerability in HiRDB.\u003cp\u003eThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.\u003c/p\u003e"
}
],
"value": "Authentication Bypass by Spoofing Vulnerability in HiRDB.\n\nThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V."
}
],
"impacts": [
{
"capecId": "CAPEC-115",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-115 Authentication Bypass"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-290",
"description": "CWE-290 Authentication bypass by spoofing",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T09:37:26.156Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-149/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-149",
"discovery": "UNKNOWN"
},
"title": "Authentication Bypass by Spoofing Vulnerability in HiRDB",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-82117",
"datePublished": "2026-10-27T09:37:26.156Z",
"dateReserved": "2026-08-28T06:36:01.233Z",
"dateUpdated": "2026-11-04T14:56:11.067Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-82116 (GCVE-0-2026-82116)
Vulnerability from cvelistv5 – Published: 2026-10-27 09:37 – Updated: 2026-11-04 14:56
VLAI
EPSS
VEX
Title
Missing Authentication for Critical Function Vulnerability in HiRDB
Summary
Missing Authentication for Critical Function Vulnerability in HiRDB.
This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 14:55 UTC
CWE
- CWE-306 - Missing authentication for critical function
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | HiRDB Server Version 10 |
Affected:
10-00 , < 10-12-01
(custom)
|
|
| Hitachi | HiRDB Server Version 9 |
Affected:
09-00 , ≤ 09-66-22
(custom)
|
|
| Hitachi | HiRDB Server with Additional Function Version 9 |
Affected:
09-00 , ≤ 09-66/V
(custom)
|
|
| Hitachi | HiRDB Server Version 9(32) |
Affected:
09-02 , ≤ 09-66-22
(custom)
|
|
| Hitachi | HiRDB Server with Additional Function Version 9(32) |
Affected:
09-00 , ≤ 09-66-/V
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-82116",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T14:55:24.678629Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T14:56:21.583Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "HiRDB Server Version 10",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "10-12-01",
"status": "unaffected"
},
{
"at": "10-11-02",
"status": "unaffected"
},
{
"at": "10-08-05",
"status": "unaffected"
}
],
"lessThan": "10-12-01",
"status": "affected",
"version": "10-00",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server Version 9",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66-22",
"status": "affected",
"version": "09-00",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server with Additional Function Version 9",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66/V",
"status": "affected",
"version": "09-00",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server Version 9(32)",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66-22",
"status": "affected",
"version": "09-02",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server with Additional Function Version 9(32)",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66-/V",
"status": "affected",
"version": "09-00",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Missing Authentication for Critical Function Vulnerability in HiRDB.\u003cbr\u003e\u003cp\u003eThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.\u003c/p\u003e"
}
],
"value": "Missing Authentication for Critical Function Vulnerability in HiRDB.\n\n\nThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V."
}
],
"impacts": [
{
"capecId": "CAPEC-36",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-36 Using Unpublished Interfaces or Functionality"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306 Missing authentication for critical function",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T09:37:25.232Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-148/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-148",
"discovery": "UNKNOWN"
},
"title": "Missing Authentication for Critical Function Vulnerability in HiRDB",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-82116",
"datePublished": "2026-10-27T09:37:25.232Z",
"dateReserved": "2026-08-28T06:36:01.233Z",
"dateUpdated": "2026-11-04T14:56:21.583Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-82118 (GCVE-0-2026-82118)
Vulnerability from cvelistv5 – Published: 2026-10-27 09:37 – Updated: 2026-11-04 14:56
VLAI
EPSS
VEX
Title
Stack-based Buffer Overflow Vulnerability in HiRDB
Summary
Stack-based Buffer Overflow Vulnerability in HiRDB.
This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 14:55 UTC
CWE
- CWE-121 - Stack-based buffer overflow
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | HiRDB Server Version 10 |
Affected:
10-00 , < 10-12-01
(custom)
|
|
| Hitachi | HiRDB Server Version 9 |
Affected:
09-00 , ≤ 09-66-22
(custom)
|
|
| Hitachi | HiRDB Server with Additional Function Version 9 |
Affected:
09-00 , ≤ 09-66/V
(custom)
|
|
| Hitachi | HiRDB Server Version 9(32) |
Affected:
09-02 , ≤ 09-66-22
(custom)
|
|
| Hitachi | HiRDB Server with Additional Function Version 9(32) |
Affected:
09-00 , ≤ 09-66-/V
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-82118",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T14:55:23.339601Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T14:56:27.595Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "HiRDB Server Version 10",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "10-12-01",
"status": "unaffected"
},
{
"at": "10-11-02",
"status": "unaffected"
},
{
"at": "10-08-05",
"status": "unaffected"
}
],
"lessThan": "10-12-01",
"status": "affected",
"version": "10-00",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server Version 9",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66-22",
"status": "affected",
"version": "09-00",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server with Additional Function Version 9",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66/V",
"status": "affected",
"version": "09-00",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server Version 9(32)",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66-22",
"status": "affected",
"version": "09-02",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server with Additional Function Version 9(32)",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66-/V",
"status": "affected",
"version": "09-00",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Stack-based Buffer Overflow Vulnerability in HiRDB.\u003cbr\u003e\u003cp\u003eThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.\u003c/p\u003e"
}
],
"value": "Stack-based Buffer Overflow Vulnerability in HiRDB.\n\n\nThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V."
}
],
"impacts": [
{
"capecId": "CAPEC-100",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-100 Overflow Buffers"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "CWE-121 Stack-based buffer overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T09:37:24.314Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-147/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-147",
"discovery": "UNKNOWN"
},
"title": "Stack-based Buffer Overflow Vulnerability in HiRDB",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-82118",
"datePublished": "2026-10-27T09:37:24.314Z",
"dateReserved": "2026-08-28T06:36:01.233Z",
"dateUpdated": "2026-11-04T14:56:27.595Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-82120 (GCVE-0-2026-82120)
Vulnerability from cvelistv5 – Published: 2026-10-27 09:37 – Updated: 2026-11-04 14:56
VLAI
EPSS
VEX
Title
Heap-based Buffer Overflow Vulnerability in HiRDB
Summary
Heap-based Buffer Overflow Vulnerability in HiRDB.
This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 14:55 UTC
CWE
- CWE-122 - Heap-based buffer overflow
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | HiRDB Server Version 10 |
Affected:
10-00 , < 10-12-01
(custom)
|
|
| Hitachi | HiRDB Server Version 9 |
Affected:
09-00 , ≤ 09-66-22
(custom)
|
|
| Hitachi | HiRDB Server with Additional Function Version 9 |
Affected:
09-00 , ≤ 09-66/V
(custom)
|
|
| Hitachi | HiRDB Server Version 9(32) |
Affected:
09-02 , ≤ 09-66-22
(custom)
|
|
| Hitachi | HiRDB Server with Additional Function Version 9(32) |
Affected:
09-00 , ≤ 09-66-/V
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-82120",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T14:55:21.809701Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T14:56:33.597Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "HiRDB Server Version 10",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "10-12-01",
"status": "unaffected"
},
{
"at": "10-11-02",
"status": "unaffected"
},
{
"at": "10-08-05",
"status": "unaffected"
}
],
"lessThan": "10-12-01",
"status": "affected",
"version": "10-00",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server Version 9",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66-22",
"status": "affected",
"version": "09-00",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server with Additional Function Version 9",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66/V",
"status": "affected",
"version": "09-00",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server Version 9(32)",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66-22",
"status": "affected",
"version": "09-02",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server with Additional Function Version 9(32)",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66-/V",
"status": "affected",
"version": "09-00",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Heap-based Buffer Overflow Vulnerability in HiRDB.\u003cbr\u003e\u003cp\u003eThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.\u003c/p\u003e"
}
],
"value": "Heap-based Buffer Overflow Vulnerability in HiRDB.\n\n\nThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V."
}
],
"impacts": [
{
"capecId": "CAPEC-100",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-100 Overflow Buffers"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122 Heap-based buffer overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T09:37:23.382Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-147/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-147",
"discovery": "UNKNOWN"
},
"title": "Heap-based Buffer Overflow Vulnerability in HiRDB",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-82120",
"datePublished": "2026-10-27T09:37:23.382Z",
"dateReserved": "2026-08-28T06:36:01.233Z",
"dateUpdated": "2026-11-04T14:56:33.597Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-82119 (GCVE-0-2026-82119)
Vulnerability from cvelistv5 – Published: 2026-10-27 09:37 – Updated: 2026-11-04 14:56
VLAI
EPSS
VEX
Title
OS Command Injection Vulnerability in HiRDB
Summary
OS Command Injection Vulnerability in HiRDB.
This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 14:55 UTC
CWE
- CWE-78 - Improper neutralization of special elements used in an OS command ('OS command injection')
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | HiRDB Server Version 10 |
Affected:
10-00 , < 10-12-01
(custom)
|
|
| Hitachi | HiRDB Server Version 9 |
Affected:
09-00 , ≤ 09-66-22
(custom)
|
|
| Hitachi | HiRDB Server with Additional Function Version 9 |
Affected:
09-00 , ≤ 09-66/V
(custom)
|
|
| Hitachi | HiRDB Server Version 9(32) |
Affected:
09-02 , ≤ 09-66-22
(custom)
|
|
| Hitachi | HiRDB Server with Additional Function Version 9(32) |
Affected:
09-00 , ≤ 09-66-/V
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-82119",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T14:55:20.118679Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T14:56:39.421Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "HiRDB Server Version 10",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "10-12-01",
"status": "unaffected"
},
{
"at": "10-11-02",
"status": "unaffected"
},
{
"at": "10-08-05",
"status": "unaffected"
}
],
"lessThan": "10-12-01",
"status": "affected",
"version": "10-00",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server Version 9",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66-22",
"status": "affected",
"version": "09-00",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server with Additional Function Version 9",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66/V",
"status": "affected",
"version": "09-00",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server Version 9(32)",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66-22",
"status": "affected",
"version": "09-02",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server with Additional Function Version 9(32)",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66-/V",
"status": "affected",
"version": "09-00",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "OS Command Injection Vulnerability in HiRDB.\u003cbr\u003e\u003cp\u003eThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.\u003c/p\u003e"
}
],
"value": "OS Command Injection Vulnerability in HiRDB.\n\n\nThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V."
}
],
"impacts": [
{
"capecId": "CAPEC-248",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-248 Command Injection"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78 Improper neutralization of special elements used in an OS command (\u0027OS command injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T09:37:22.455Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-146/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-146",
"discovery": "UNKNOWN"
},
"title": "OS Command Injection Vulnerability in HiRDB",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-82119",
"datePublished": "2026-10-27T09:37:22.455Z",
"dateReserved": "2026-08-28T06:36:01.233Z",
"dateUpdated": "2026-11-04T14:56:39.421Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-82121 (GCVE-0-2026-82121)
Vulnerability from cvelistv5 – Published: 2026-10-27 09:37 – Updated: 2026-11-04 14:56
VLAI
EPSS
VEX
Title
Origin Validation Error Vulnerability in HiRDB
Summary
Origin Validation Error Vulnerability in HiRDB.
This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 14:54 UTC
CWE
- CWE-346 - Origin Validation Error
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | HiRDB Server Version 10 |
Affected:
10-00 , < 10-12-01
(custom)
|
|
| Hitachi | HiRDB Server Version 9 |
Affected:
09-00 , ≤ 09-66-22
(custom)
|
|
| Hitachi | HiRDB Server with Additional Function Version 9 |
Affected:
09-00 , ≤ 09-66/V
(custom)
|
|
| Hitachi | HiRDB Server Version 9(32) |
Affected:
09-02 , ≤ 09-66-22
(custom)
|
|
| Hitachi | HiRDB Server with Additional Function Version 9(32) |
Affected:
09-00 , ≤ 09-66-/V
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-82121",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T14:54:00.794792Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T14:56:46.188Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "HiRDB Server Version 10",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "10-12-01",
"status": "unaffected"
},
{
"at": "10-11-02",
"status": "unaffected"
},
{
"at": "10-08-05",
"status": "unaffected"
}
],
"lessThan": "10-12-01",
"status": "affected",
"version": "10-00",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server Version 9",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66-22",
"status": "affected",
"version": "09-00",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server with Additional Function Version 9",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66/V",
"status": "affected",
"version": "09-00",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server Version 9(32)",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66-22",
"status": "affected",
"version": "09-02",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server with Additional Function Version 9(32)",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66-/V",
"status": "affected",
"version": "09-00",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Origin Validation Error Vulnerability in HiRDB.\u003cbr\u003e\u003cp\u003eThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.\u003c/p\u003e"
}
],
"value": "Origin Validation Error Vulnerability in HiRDB.\n\n\nThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V."
}
],
"impacts": [
{
"capecId": "CAPEC-94",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-94 Adversary in the Middle (AiTM)"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-346",
"description": "CWE-346 Origin Validation Error",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T09:37:21.507Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-145/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-145",
"discovery": "UNKNOWN"
},
"title": "Origin Validation Error Vulnerability in HiRDB",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-82121",
"datePublished": "2026-10-27T09:37:21.507Z",
"dateReserved": "2026-08-28T06:36:01.233Z",
"dateUpdated": "2026-11-04T14:56:46.188Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-82122 (GCVE-0-2026-82122)
Vulnerability from cvelistv5 – Published: 2026-10-27 09:37 – Updated: 2026-11-04 14:56
VLAI
EPSS
VEX
Title
Stack-based Buffer Overflow Vulnerability in HiRDB
Summary
Stack-based Buffer Overflow Vulnerability in HiRDB.
This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.
Severity
9.4 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 14:55 UTC
CWE
- CWE-121 - Stack-based buffer overflow
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | HiRDB Server Version 10 |
Affected:
10-00 , < 10-12-01
(custom)
|
|
| Hitachi | HiRDB Server Version 9 |
Affected:
09-00 , ≤ 09-66-22
(custom)
|
|
| Hitachi | HiRDB Server with Additional Function Version 9 |
Affected:
09-00 , ≤ 09-66/V
(custom)
|
|
| Hitachi | HiRDB Server Version 9(32) |
Affected:
09-02 , ≤ 09-66-22
(custom)
|
|
| Hitachi | HiRDB Server with Additional Function Version 9(32) |
Affected:
09-00 , ≤ 09-66-/V
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-82122",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T14:55:18.694669Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T14:56:51.969Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "HiRDB Server Version 10",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "10-12-01",
"status": "unaffected"
},
{
"at": "10-11-02",
"status": "unaffected"
},
{
"at": "10-08-05",
"status": "unaffected"
}
],
"lessThan": "10-12-01",
"status": "affected",
"version": "10-00",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server Version 9",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66-22",
"status": "affected",
"version": "09-00",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server with Additional Function Version 9",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66/V",
"status": "affected",
"version": "09-00",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server Version 9(32)",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66-22",
"status": "affected",
"version": "09-02",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "HiRDB Server with Additional Function Version 9(32)",
"vendor": "Hitachi",
"versions": [
{
"lessThanOrEqual": "09-66-/V",
"status": "affected",
"version": "09-00",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Stack-based Buffer Overflow Vulnerability in HiRDB.\u003cbr\u003e\u003cp\u003eThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.\u003c/p\u003e"
}
],
"value": "Stack-based Buffer Overflow Vulnerability in HiRDB.\n\n\nThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V."
}
],
"impacts": [
{
"capecId": "CAPEC-100",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-100 Overflow Buffers"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "CWE-121 Stack-based buffer overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T09:37:20.580Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-144/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-144",
"discovery": "UNKNOWN"
},
"title": "Stack-based Buffer Overflow Vulnerability in HiRDB",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-82122",
"datePublished": "2026-10-27T09:37:20.580Z",
"dateReserved": "2026-08-28T06:36:01.233Z",
"dateUpdated": "2026-11-04T14:56:51.969Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76939 (GCVE-0-2026-76939)
Vulnerability from cvelistv5 – Published: 2026-10-27 09:37 – Updated: 2026-11-04 14:56
VLAI
EPSS
VEX
Title
Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
Summary
Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.
This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 14:55 UTC
CWE
- CWE-122 - Heap-based buffer overflow
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | JP1/Automatic Job Management System 3 - Manager |
Affected:
11-00 , < 13-50-31
(custom)
|
|
| Hitachi | JP1/Automatic Job Management System 3 - Agent |
Affected:
11-00 , < 13-50-31
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76939",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T14:55:16.726825Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T14:56:59.965Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "JP1/Automatic Job Management System 3 - Manager",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "13-50-31",
"status": "unaffected"
},
{
"at": "12-60-53",
"status": "unaffected"
},
{
"at": "11-50-39",
"status": "unaffected"
}
],
"lessThan": "13-50-31",
"status": "affected",
"version": "11-00",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "JP1/Automatic Job Management System 3 - Agent",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "13-50-31",
"status": "unaffected"
},
{
"at": "12-60-53",
"status": "unaffected"
},
{
"at": "11-50-39",
"status": "unaffected"
}
],
"lessThan": "13-50-31",
"status": "affected",
"version": "11-00",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.\u003cp\u003eThis issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.\u003c/p\u003e"
}
],
"value": "Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.\n\nThis issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31."
}
],
"impacts": [
{
"capecId": "CAPEC-100",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-100 Overflow Buffers"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122 Heap-based buffer overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T09:37:19.629Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-143/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-143",
"discovery": "UNKNOWN"
},
"title": "Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-76939",
"datePublished": "2026-10-27T09:37:19.629Z",
"dateReserved": "2026-08-20T02:15:24.113Z",
"dateUpdated": "2026-11-04T14:56:59.965Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76936 (GCVE-0-2026-76936)
Vulnerability from cvelistv5 – Published: 2026-10-27 09:37 – Updated: 2026-11-04 14:57
VLAI
EPSS
VEX
Title
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
Summary
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.
This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
Severity
9.4 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 14:55 UTC
CWE
- CWE-121 - Stack-based buffer overflow
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | JP1/Automatic Job Management System 3 - Manager |
Affected:
10-00 , < 13-50-31
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76936",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T14:55:15.325376Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T14:57:13.920Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "JP1/Automatic Job Management System 3 - Manager",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "13-50-31",
"status": "unaffected"
},
{
"at": "12-60-53",
"status": "unaffected"
},
{
"at": "11-50-39",
"status": "unaffected"
}
],
"lessThan": "13-50-31",
"status": "affected",
"version": "10-00",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.\u003cbr\u003e\u003cp\u003eThis issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.\u003c/p\u003e"
}
],
"value": "Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.\n\n\nThis issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31."
}
],
"impacts": [
{
"capecId": "CAPEC-100",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-100 Overflow Buffers"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "CWE-121 Stack-based buffer overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T09:37:18.688Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-142/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-142",
"discovery": "UNKNOWN"
},
"title": "Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-76936",
"datePublished": "2026-10-27T09:37:18.688Z",
"dateReserved": "2026-08-20T02:15:24.113Z",
"dateUpdated": "2026-11-04T14:57:13.920Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76937 (GCVE-0-2026-76937)
Vulnerability from cvelistv5 – Published: 2026-10-27 09:37 – Updated: 2026-11-04 16:42
VLAI
EPSS
VEX
Title
Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
Summary
Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.
This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
Severity
9.4 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 16:41 UTC
CWE
- CWE-122 - Heap-based buffer overflow
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | JP1/Automatic Job Management System 3 - Manager |
Affected:
10-00 , < 13-50-31
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76937",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T16:41:47.749791Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T16:42:15.826Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "JP1/Automatic Job Management System 3 - Manager",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "13-50-31",
"status": "unaffected"
},
{
"at": "12-60-53",
"status": "unaffected"
},
{
"at": "11-50-39",
"status": "unaffected"
}
],
"lessThan": "13-50-31",
"status": "affected",
"version": "10-00",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.\u003cbr\u003e\u003cp\u003eThis issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.\u003c/p\u003e"
}
],
"value": "Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.\n\n\nThis issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31."
}
],
"impacts": [
{
"capecId": "CAPEC-100",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-100 Overflow Buffers"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122 Heap-based buffer overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T09:37:17.763Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-142/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-142",
"discovery": "UNKNOWN"
},
"title": "Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-76937",
"datePublished": "2026-10-27T09:37:17.763Z",
"dateReserved": "2026-08-20T02:15:24.113Z",
"dateUpdated": "2026-11-04T16:42:15.826Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76938 (GCVE-0-2026-76938)
Vulnerability from cvelistv5 – Published: 2026-10-27 09:37 – Updated: 2026-11-04 16:41
VLAI
EPSS
VEX
Title
Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3
Summary
Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3.
This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 16:41 UTC
CWE
- CWE-290 - Authentication bypass by spoofing
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | JP1/Automatic Job Management System 3 - Manager |
Affected:
10-00 , < 13-50-31
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76938",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T16:41:23.975725Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T16:41:34.516Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "JP1/Automatic Job Management System 3 - Manager",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "13-50-31",
"status": "unaffected"
},
{
"at": "12-60-53",
"status": "unaffected"
},
{
"at": "11-50-39",
"status": "unaffected"
}
],
"lessThan": "13-50-31",
"status": "affected",
"version": "10-00",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3.\u003cbr\u003e\u003cp\u003eThis issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.\u003c/p\u003e"
}
],
"value": "Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3.\n\n\nThis issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31."
}
],
"impacts": [
{
"capecId": "CAPEC-115",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-115 Authentication Bypass"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-290",
"description": "CWE-290 Authentication bypass by spoofing",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T09:37:16.816Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-142/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-142",
"discovery": "UNKNOWN"
},
"title": "Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-76938",
"datePublished": "2026-10-27T09:37:16.816Z",
"dateReserved": "2026-08-20T02:15:24.113Z",
"dateUpdated": "2026-11-04T16:41:34.516Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76935 (GCVE-0-2026-76935)
Vulnerability from cvelistv5 – Published: 2026-10-27 09:37 – Updated: 2026-11-04 16:41
VLAI
EPSS
VEX
Title
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
Summary
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.
This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
Severity
9.4 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 16:39 UTC
CWE
- CWE-121 - Stack-based buffer overflow
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | JP1/Automatic Job Management System 3 - Manager |
Affected:
13-10 , < 13-50-31
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76935",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T16:39:54.444419Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T16:41:10.547Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "JP1/Automatic Job Management System 3 - Manager",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "13-50-31",
"status": "unaffected"
}
],
"lessThan": "13-50-31",
"status": "affected",
"version": "13-10",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.\u003cbr\u003e\u003cp\u003eThis issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.\u003c/p\u003e"
}
],
"value": "Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.\n\n\nThis issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31."
}
],
"impacts": [
{
"capecId": "CAPEC-100",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-100 Overflow Buffers"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "CWE-121 Stack-based buffer overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T09:37:15.880Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-141/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-141",
"discovery": "UNKNOWN"
},
"title": "Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-76935",
"datePublished": "2026-10-27T09:37:15.880Z",
"dateReserved": "2026-08-20T02:15:24.113Z",
"dateUpdated": "2026-11-04T16:41:10.547Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76934 (GCVE-0-2026-76934)
Vulnerability from cvelistv5 – Published: 2026-10-27 09:37 – Updated: 2026-11-04 16:38
VLAI
EPSS
VEX
Title
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3
Summary
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.
This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 16:38 UTC
CWE
- CWE-121 - Stack-based buffer overflow
Assigner
Hitachi
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://www.hitachi.com/products/it/software/secu… | vendor-advisory |
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hitachi | JP1/Automatic Job Management System 3 - Manager |
Affected:
10-00 , < 13-50-31
(custom)
|
|
| Hitachi | JP1/Automatic Job Management System 3 - Agent |
Affected:
10-00 , < 13-50-31
(custom)
|
|
| Hitachi | JP1/Automatic Job Management System 3 - Agent Minimal Edition |
Affected:
11-50 , < 13-50-31
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76934",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T16:38:33.743782Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T16:38:52.761Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "JP1/Automatic Job Management System 3 - Manager",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "13-50-31",
"status": "unaffected"
},
{
"at": "12-60-53",
"status": "unaffected"
},
{
"at": "11-50-39",
"status": "unaffected"
}
],
"lessThan": "13-50-31",
"status": "affected",
"version": "10-00",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "JP1/Automatic Job Management System 3 - Agent",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "13-50-31",
"status": "unaffected"
},
{
"at": "12-60-53",
"status": "unaffected"
},
{
"at": "11-50-39",
"status": "unaffected"
}
],
"lessThan": "13-50-31",
"status": "affected",
"version": "10-00",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "JP1/Automatic Job Management System 3 - Agent Minimal Edition",
"vendor": "Hitachi",
"versions": [
{
"changes": [
{
"at": "13-50-31",
"status": "unaffected"
},
{
"at": "12-60-53",
"status": "unaffected"
},
{
"at": "11-50-39",
"status": "unaffected"
}
],
"lessThan": "13-50-31",
"status": "affected",
"version": "11-50",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.\u003cp\u003eThis issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.\u003c/p\u003e"
}
],
"value": "Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.\n\nThis issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31."
}
],
"impacts": [
{
"capecId": "CAPEC-100",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-100 Overflow Buffers"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "CWE-121 Stack-based buffer overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T09:37:14.930Z",
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-140/index.html"
}
],
"source": {
"advisory": "hitachi-sec-2026-140",
"discovery": "UNKNOWN"
},
"title": "Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"assignerShortName": "Hitachi",
"cveId": "CVE-2026-76934",
"datePublished": "2026-10-27T09:37:14.930Z",
"dateReserved": "2026-08-20T02:15:24.113Z",
"dateUpdated": "2026-11-04T16:38:52.761Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}