Cpe:2.3:a:hitachi:hirdb_server:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3ahitachihirdb_server/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 27 Oct 2026 10:57:15 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgHitachi HiRDB Server: Missing Authentication for Critical Function (CVE-2026-82116)https://feed.craftedsignal.io/briefs/2026-10-hirdb-auth-bypass/Tue, 27 Oct 2026 10:57:15 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-hirdb-auth-bypass/A missing authentication vulnerability in Hitachi HiRDB Server allows unauthenticated actors to access critical database functions, warranting immediate patching.CVE-2026-82116 identifies a vulnerability where critical database functions in Hitachi HiRDB Server lack proper authentication checks. This flaw allows unauthorized, unauthenticated users to interact with sensitive database operations. The vulnerability affects multiple versions of the HiRDB Server product line, including Version 10 and Version 9 branches.

Impact

The vulnerability carries a CVSS v3.1 base score of 9.8, indicating a critical risk of unauthorized access or modification to data managed by the database server. No specific exploitation incidents have been publicly documented at this time.

Recommendation

Inventory all deployments of Hitachi HiRDB Server within the environment to identify versions within the affected ranges. Prioritize the application of official patches provided by Hitachi for the affected HiRDB Server 10 and 9 branches immediately.

]]>criticaladvisory