CVE-2026-82117
Received
Received - Intake
Authentication Bypass by Spoofing in HiRDB
Vulnerability report for CVE-2026-82117, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-27
Last updated on: 2026-10-27
Assigner: Hitachi, Ltd.
Description
Description
Authentication Bypass by Spoofing Vulnerability in HiRDB.
This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Hitachi | HiRDB Server Version 10 | 10-00 |
| Hitachi | HiRDB Server Version 9 | 09-00 |
| Hitachi | HiRDB Server with Additional Function Version 9 | 09-00 |
| Hitachi | HiRDB Server Version 9(32) | 09-02 |
| Hitachi | HiRDB Server with Additional Function Version 9(32) | 09-00 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-290 | This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks. |
