Log in Start free

Vulnerability · Published Oct 27, 2026 · Assigned by Hitachi

CVE-2026-82117Authentication Bypass by Spoofing Vulnerability in HiRDB

Critical 9.8

In plain English

A critical-severity authentication bypass by spoofing in HiRDB Server Version 10 from Hitachi. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 51% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.6%top 49.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Authentication Bypass by Spoofing Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.

Affected products (as reported)

VendorProductVersions
Hitachi HiRDB Server Version 10 10-00 – before 10-12-01
Hitachi HiRDB Server Version 9 09-00 – through 09-66-22
Hitachi HiRDB Server with Additional Function Version 9 09-00 – through 09-66/V
Hitachi HiRDB Server Version 9(32) 09-02 – through 09-66-22
Hitachi HiRDB Server with Additional Function Version 9(32) 09-00 – through 09-66-/V

Weakness: CWE-290 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References