Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

HiRDB Server lets unauthenticated users run privileged commands

CVE-2026-82116 · published today
Summary

Several versions of Hitachi's HiRDB database server do not check whether a user is logged in before allowing access to a critical function. This could let an outsider execute actions that should be restricted to authorized staff. Upgrade to the latest patched version or apply the vendor’s recommended update to close the gap.

What to do
  • Update hitachi hirdb server version 10 to version 10-08-05.
Affected software
VendorProductAffected versions
hitachi hirdb server version 10 < 10-12-01
Fix: upgrade to 10-08-05
hitachi hirdb server version 9 <= 09-66-22
hitachi hirdb server with additional function version 9 <= 09-66/V
hitachi hirdb server version 9(32) <= 09-66-22
hitachi hirdb server with additional function version 9(32) <= 09-66-/V
Original advisory text
Missing Authentication for Critical Function Vulnerability in HiRDB
Missing Authentication for Critical Function Vulnerability in HiRDB.


This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-306Missing Authentication for Critical Function
Timeline
Published27 Oct 2026
Updated27 Oct 2026
First seen27 Oct 2026
Sources
CVE-2026-82116 · NVD
CVE-2026-82116 · MITRE
Track software like this
Free during beta