Log in Start free

Vulnerability · Published Oct 27, 2026 · Assigned by Hitachi

CVE-2026-82119OS Command Injection Vulnerability in HiRDB

Critical 9.8

In plain English

A critical-severity OS command injection in HiRDB Server Version 10 from Hitachi. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)1.0%top 35.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

OS Command Injection Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.

Affected products (as reported)

VendorProductVersions
Hitachi HiRDB Server Version 10 10-00 – before 10-12-01
Hitachi HiRDB Server Version 9 09-00 – through 09-66-22
Hitachi HiRDB Server with Additional Function Version 9 09-00 – through 09-66/V
Hitachi HiRDB Server Version 9(32) 09-02 – through 09-66-22
Hitachi HiRDB Server with Additional Function Version 9(32) 09-00 – through 09-66-/V

Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References