CVE-2026-82715

Deferred Deferred - Pending Action

Insecure Temporary File Handling in Hitachi Disk Array Driver

Publication date: 2026-10-14

Last updated on: 2026-10-18

Assigner: Hitachi, Ltd.

Description

Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server. This issue affects Hitachi Disk Array Driver for AIX: from 01-00 before 01-23-/A; Hitachi Disk Array Driver for Virtual I/O Server: from 01-04 before 01-23-/A.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-18

Generated

2026-10-19

AI Q&A

2026-10-14

EPSS Evaluated

2026-10-18

NVD

CVE-2026-82715

EUVD

EUVD-2026-100774

Affected Vendors & Products

Vendor	Product	Version / Range
Hitachi	Hitachi	Disk Array Driver for AIX 01-00
Hitachi	Hitachi	Disk Array Driver for Virtual I/O Server 01-04

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-377	Creating and using insecure temporary files can leave application and system data vulnerable to attack.

Attack-Flow Graph

Executive Summary

CVE-2026-82715 is an Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server. It allows attackers with local access to manipulate temporary files, potentially leading to unauthorized modifications or disruptions in system integrity and availability.

Detection Guidance

Detection involves checking installed versions of Hitachi Disk Array Driver for AIX or Virtual I/O Server. Compare installed version against affected ranges (01-00 to 01-23). Use commands like 'lslpp -l | grep -i disk' on AIX or 'ioslevel' on Virtual I/O Server to verify versions.

Impact Analysis

This vulnerability can allow attackers to gain unauthorized access, modify critical system files, or disrupt services running on affected systems. It may lead to data corruption, system crashes, or unauthorized privilege escalation if exploited.

Compliance Impact

The vulnerability's impact on compliance with standards like GDPR or HIPAA is not explicitly detailed in the provided context. However, insecure temporary files could potentially lead to unauthorized data access or modification, which may violate confidentiality and integrity requirements in these regulations.

Mitigation Strategies

Upgrade Hitachi Disk Array Driver for AIX to version 01-23 or later and Hitachi Disk Array Driver for Virtual I/O Server to version 01-23 or later to mitigate the risk.

Hi! I’m here to help you understand CVE-2026-82715. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70