CVE-2026-82116— Missing Authentication for Critical Function Vulnerability in HiRDB
Quick assessment
Affected
Hitachi HiRDB Server Version 10
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
HiRDB 中存在关键功能缺失身份验证的漏洞。 受影响的版本包括： HiRDB Server 10：版本 10-00 至 10-12-01 之前； HiRDB Server 9：版本 09-00 至 09-66-22； 带附加功能的 HiRDB Server 9：版本 09-00 至 09-66/V； HiRDB Server 9（32 位）：版本 09-02 至 09-66-22； 带附加功能的 HiRDB Server 9（32 位）：版本 09-00 至 09-66-/V。
Possible ATT&CK Techniques 1 AI
T1570 · Lateral Tool Transfer
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-82116
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Missing Authentication for Critical Function Vulnerability in HiRDB
Source: CVE Program / CVE List V5
Vulnerability Description
Missing Authentication for Critical Function Vulnerability in HiRDB.
This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
关键功能的认证机制缺失
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Hitachi | HiRDB Server Version 10 | 10-00 ~ 10-12-01 | - |
|
| Hitachi | HiRDB Server Version 9 | 09-00 ~ 09-66-22 | - |
|
| Hitachi | HiRDB Server with Additional Function Version 9 | 09-00 ~ 09-66/V | - |
|
| Hitachi | HiRDB Server Version 9(32) | 09-02 ~ 09-66-22 | - |
|
| Hitachi | HiRDB Server with Additional Function Version 9(32) | 09-00 ~ 09-66-/V | - |
|
II. Public POCs for CVE-2026-82116
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-82116
请登录查看更多情报信息。
Other References for CVE-2026-82116 (1)
Same Patch Batch · Hitachi · 2026-10-27 · 19 CVEs total
| CVE-2026-76939 | 9.8 CRITICAL | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-76938 | 9.8 CRITICAL | Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-86574 | 9.8 CRITICAL | Heap-based Buffer Overflow Vulnerability in JP1/Base |
| CVE-2026-76934 | 9.8 CRITICAL | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-82120 | 9.8 CRITICAL | Heap-based Buffer Overflow Vulnerability in HiRDB |
| CVE-2026-82117 | 9.8 CRITICAL | Authentication Bypass by Spoofing Vulnerability in HiRDB |
| CVE-2026-82119 | 9.8 CRITICAL | OS Command Injection Vulnerability in HiRDB |
| CVE-2026-82118 | 9.8 CRITICAL | Stack-based Buffer Overflow Vulnerability in HiRDB |
| CVE-2026-86575 | 9.4 CRITICAL | Stack-based Buffer Overflow Vulnerability in JP1 Products |
| CVE-2026-86576 | 9.4 CRITICAL | Heap-based Buffer Overflow Vulnerability in JP1 Products |
| CVE-2026-86577 | 9.4 CRITICAL | Out-of-bounds Write Vulnerability in JP1 Products |
| CVE-2026-82122 | 9.4 CRITICAL | Stack-based Buffer Overflow Vulnerability in HiRDB |
| CVE-2026-76935 | 9.4 CRITICAL | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-76933 | 9.4 CRITICAL | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-76932 | 9.4 CRITICAL | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-76937 | 9.4 CRITICAL | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-76936 | 9.4 CRITICAL | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-82121 | 7.5 HIGH | Origin Validation Error Vulnerability in HiRDB |
IV. Related Vulnerabilities
Same product: HiRDB Server Version 10
-
CVE-2026-82117
Authentication Bypass by Spoofing Vulnerability in HiRDB -
CVE-2026-82118
Stack-based Buffer Overflow Vulnerability in HiRDB -
CVE-2026-82120
Heap-based Buffer Overflow Vulnerability in HiRDB -
CVE-2026-82121
Origin Validation Error Vulnerability in HiRDB -
CVE-2026-82119
OS Command Injection Vulnerability in HiRDB
Same vendor: Hitachi
-
CVE-2026-82117
Authentication Bypass by Spoofing Vulnerability in HiRDB -
CVE-2026-82118
Stack-based Buffer Overflow Vulnerability in HiRDB -
CVE-2026-82120
Heap-based Buffer Overflow Vulnerability in HiRDB -
CVE-2026-82119
OS Command Injection Vulnerability in HiRDB -
CVE-2026-82121
Origin Validation Error Vulnerability in HiRDB
Same weakness: CWE-306
-
CVE-2026-106087
TRO600 任意文件读取漏洞 -
CVE-2026-18450
Supermicro BMC contains Unprotected IPMI Commands Accepted -
CVE-2026-116604
SourceCodester Online Food Ordering System delete_admin.php -
CVE-2026-116817
OpenPanel before 3.0.0 Missing Authentication on Worker Bull -
CVE-2026-116634
OmniRoute 3.8.50 before 3.8.52 Missing Authentication via /a