CVE-2026-82117— Authentication Bypass by Spoofing Vulnerability in HiRDB
Quick assessment
Affected
Hitachi HiRDB Server Version 10
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
HiRDB 中存在通过伪造实现的身份验证绕过漏洞。 该漏洞影响以下版本： HiRDB 服务器 10 版本：10-00 至 10-12-01 之前的版本； HiRDB 服务器 9 版本：09-00 至 09-66-22； HiRDB 服务器 9 版本（含附加功能）：09-00 至 09-66/V； HiRDB 服务器 9 版本（32 位）：09-02 至 09-66-22； HiRDB 服务器 9 版本（32 位，含附加功能）：09-00 至 09-66-/V。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-82117
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Authentication Bypass by Spoofing Vulnerability in HiRDB
Source: CVE Program / CVE List V5
Vulnerability Description
Authentication Bypass by Spoofing Vulnerability in HiRDB.
This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
使用欺骗进行的认证绕过
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Hitachi | HiRDB Server Version 10 | 10-00 ~ 10-12-01 | - |
|
| Hitachi | HiRDB Server Version 9 | 09-00 ~ 09-66-22 | - |
|
| Hitachi | HiRDB Server with Additional Function Version 9 | 09-00 ~ 09-66/V | - |
|
| Hitachi | HiRDB Server Version 9(32) | 09-02 ~ 09-66-22 | - |
|
| Hitachi | HiRDB Server with Additional Function Version 9(32) | 09-00 ~ 09-66-/V | - |
|
II. Public POCs for CVE-2026-82117
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-82117
请登录查看更多情报信息。
Other References for CVE-2026-82117 (1)
Same Patch Batch · Hitachi · 2026-10-27 · 19 CVEs total
| CVE-2026-76939 | 9.8 CRITICAL | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-76938 | 9.8 CRITICAL | Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-86574 | 9.8 CRITICAL | Heap-based Buffer Overflow Vulnerability in JP1/Base |
| CVE-2026-76934 | 9.8 CRITICAL | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-82120 | 9.8 CRITICAL | Heap-based Buffer Overflow Vulnerability in HiRDB |
| CVE-2026-82116 | 9.8 CRITICAL | Missing Authentication for Critical Function Vulnerability in HiRDB |
| CVE-2026-82119 | 9.8 CRITICAL | OS Command Injection Vulnerability in HiRDB |
| CVE-2026-82118 | 9.8 CRITICAL | Stack-based Buffer Overflow Vulnerability in HiRDB |
| CVE-2026-86575 | 9.4 CRITICAL | Stack-based Buffer Overflow Vulnerability in JP1 Products |
| CVE-2026-86576 | 9.4 CRITICAL | Heap-based Buffer Overflow Vulnerability in JP1 Products |
| CVE-2026-86577 | 9.4 CRITICAL | Out-of-bounds Write Vulnerability in JP1 Products |
| CVE-2026-82122 | 9.4 CRITICAL | Stack-based Buffer Overflow Vulnerability in HiRDB |
| CVE-2026-76935 | 9.4 CRITICAL | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-76933 | 9.4 CRITICAL | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-76932 | 9.4 CRITICAL | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-76937 | 9.4 CRITICAL | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-76936 | 9.4 CRITICAL | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-82121 | 7.5 HIGH | Origin Validation Error Vulnerability in HiRDB |
IV. Related Vulnerabilities
Same product: HiRDB Server Version 10
-
CVE-2026-82116
Missing Authentication for Critical Function Vulnerability i -
CVE-2026-82118
Stack-based Buffer Overflow Vulnerability in HiRDB -
CVE-2026-82120
Heap-based Buffer Overflow Vulnerability in HiRDB -
CVE-2026-82121
Origin Validation Error Vulnerability in HiRDB -
CVE-2026-82119
OS Command Injection Vulnerability in HiRDB
Same vendor: Hitachi
-
CVE-2026-82116
Missing Authentication for Critical Function Vulnerability i -
CVE-2026-82118
Stack-based Buffer Overflow Vulnerability in HiRDB -
CVE-2026-82120
Heap-based Buffer Overflow Vulnerability in HiRDB -
CVE-2026-82119
OS Command Injection Vulnerability in HiRDB -
CVE-2026-82121
Origin Validation Error Vulnerability in HiRDB
Same weakness: CWE-290
-
CVE-2026-76938
Authentication Bypass Vulnerability in JP1/Automatic Job Man -
CVE-2026-107147
Authentication bypass by spoofing in twofactor_gauthenticato -
CVE-2026-70381
Unauthorized Access to Internal Web Resources -
CVE-2026-115933
Forged signed tokens let any registered user take over other -
CVE-2026-93629
Zimbra Collaboration Suite Calendar Processing Authenticatio