Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-108336— Token Signing Key Allows Unauthenticated Administrative Access

Quick assessment

Affected
Hitachi Vantara Remot Ops Agent
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

当使用默认的自签名证书时，攻击者可能获得该应用程序的管理员权限。 Web 界面的 SSL 证书用于对 JWT（JSON Web Token）访问令牌进行签名，这些令牌用于验证用户是否已登录。当使用默认的 SSL 证书时，攻击者可能具备签名 JWT 访问令牌的能力，从而绕过登录验证。 攻击者可能获得该应用程序的管理员权限，并执行诸如配置服务或请求日志收集等操作。然而，此漏洞无法用于获取设备凭据和客户数据。

CVSS 9.1 · Critical EPSS 0.22% · P12

Affected Version Matrix 2

VendorProduct Version RangeStatus
Hitachi Vantara Remot Ops Agent 2.1 unaffected
1.60≤ 2.0 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-108336

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Token Signing Key Allows Unauthenticated Administrative Access
Source: CVE Program / CVE List V5
Vulnerability Description
When the default self-signed certificate is used, an attacker could gain administrative access to the application. The SSL certificate for the web interface is used to sign JWT access tokens that are used to validate that the user is logged in. When the default SSL certificate is used, an attacker could have the capability to sign JWT access tokens and bypass login. An attacker could gain administrative access to the application and perform actions like configuring the service or requesting log collection. Device credentials and customer data cannot be accessed with this vulnerability.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
使用硬编码的密码学密钥
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Hitachi Vantara Remot Ops Agent 1.60 ~ 2.0 -

II. Public POCs for CVE-2026-108336

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-108336

请登录查看更多情报信息。

Other References for CVE-2026-108336 (1)

Same Patch Batch · Hitachi Vantara · 2026-10-14 · 3 CVEs total

CVE-2026-108335 9.1 CRITICAL Password Reset Functionality Missing Brute-Force Protection
CVE-2026-108337 7.4 HIGH Password Reset Code Accessible in User Listing API

IV. Related Vulnerabilities

Same product: Remot Ops Agent
Same vendor: Hitachi Vantara
Same weakness: CWE-321

V. Comments for CVE-2026-108336

No comments yet

Leave a comment