Hitachi HiRDB Server: Missing Authentication for Critical Function (CVE-2026-82116)
A missing authentication vulnerability in Hitachi HiRDB Server allows unauthenticated actors to access critical database functions, warranting immediate patching.
CVE search metadata
CVE search record: CVE-2026-82116. Severity: critical. CVSS: 9.8. KEV: no. Product: HiRDB Server (10-00 <= v < 10-12-01), HiRDB Server (09-00 <= v <= 09-66-22), HiRDB Server with Additional Function (09-00 <= v <= 09-66/V), HiRDB Server 9(32) (09-02 <= v <= 09-66-22), HiRDB Server with Additional Function 9(32) (09-00 <= v <= 09-66-/V). Brief: Hitachi HiRDB Server: Missing Authentication for Critical Function (CVE-2026-82116). Brief link: https://feed.craftedsignal.io/briefs/2026-10-hirdb-auth-bypass/
Triage facts
Revision 1- Applicability
- HiRDB Server (10-00 <= v < 10-12-01), HiRDB Server (09-00 <= v <= 09-66-22) +3
- Evidence
- Unknown
- Severity
- Critical
- Action
- Elevated
- Sources
- 1 public source
- Freshness
- Revision 1Oct 27, 10:57 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A1Roughly even chance
CVE-2026-82116 identifies a vulnerability where critical database functions in Hitachi HiRDB Server lack proper authentication checks. This flaw allows unauthorized, unauthenticated users to interact with sensitive database operations. The vulnerability affects multiple versions of the HiRDB Server product line, including Version 10 and Version 9 branches.
Impact
The vulnerability carries a CVSS v3.1 base score of 9.8, indicating a critical risk of unauthorized access or modification to data managed by the database server. No specific exploitation incidents have been publicly documented at this time.
Recommendation
Inventory all deployments of Hitachi HiRDB Server within the environment to identify versions within the affected ranges. Prioritize the application of official patches provided by Hitachi for the affected HiRDB Server 10 and 9 branches immediately.
Immediate actions
Inventory all Hitachi HiRDB Server installations
Mitigations
Apply security patches provided by Hitachi for HiRDB Server
CVE-2026-82116