Vulnerability · Published Oct 1, 2026 · Assigned by Hitachi
CVE-2026-82827A hard-coded JWT signing secret key may allow administrative functions to be abused using fraudulently generated Bearer tokens
Critical 9.8
In plain English
A critical-severity security flaw in Hitachi Coding Software Suite from Hitachi Industrial Equipment Systems. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 19% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.3%top 80.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of JWT signing secret key allows an attacker to generate unauthorized Bearer tokens and exploit administrative functions. This issue affects Hitachi Coding Software Suite: through 3.3.0.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hitachi Industrial Equipment Systems | Hitachi Coding Software Suite | 0 – through 3.3.0 |
Weakness: CWE-321 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H