CVE-2026-82120— Heap-based Buffer Overflow Vulnerability in HiRDB
Quick assessment
Affected
Hitachi HiRDB Server Version 10
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
HiRDB 中存在堆缓冲区溢出漏洞。 该问题影响以下版本： HiRDB 服务器 10 版：从 10-00 到 10-12-01（不含）； HiRDB 服务器 9 版：从 09-00 到 09-66-22（含）； HiRDB 服务器 9 版（含附加功能）：从 09-00 到 09-66/V（含）； HiRDB 服务器 9 版（32 位）：从 09-02 到 09-66-22（含）； HiRDB 服务器 9 版（32 位，含附加功能）：从 09-00 到 09-66-/V（含）。
Possible ATT&CK Techniques 3 AI
T1068 · Exploitation for Privilege Escalation T1203 · Exploitation for Client Execution T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-82120
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Heap-based Buffer Overflow Vulnerability in HiRDB
Source: CVE Program / CVE List V5
Vulnerability Description
Heap-based Buffer Overflow Vulnerability in HiRDB.
This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
堆缓冲区溢出
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Hitachi | HiRDB Server Version 10 | 10-00 ~ 10-12-01 | - |
|
| Hitachi | HiRDB Server Version 9 | 09-00 ~ 09-66-22 | - |
|
| Hitachi | HiRDB Server with Additional Function Version 9 | 09-00 ~ 09-66/V | - |
|
| Hitachi | HiRDB Server Version 9(32) | 09-02 ~ 09-66-22 | - |
|
| Hitachi | HiRDB Server with Additional Function Version 9(32) | 09-00 ~ 09-66-/V | - |
|
II. Public POCs for CVE-2026-82120
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-82120
请登录查看更多情报信息。
Other References for CVE-2026-82120 (1)
Same Patch Batch · Hitachi · 2026-10-27 · 19 CVEs total
| CVE-2026-76939 | 9.8 CRITICAL | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-86574 | 9.8 CRITICAL | Heap-based Buffer Overflow Vulnerability in JP1/Base |
| CVE-2026-82119 | 9.8 CRITICAL | OS Command Injection Vulnerability in HiRDB |
| CVE-2026-82118 | 9.8 CRITICAL | Stack-based Buffer Overflow Vulnerability in HiRDB |
| CVE-2026-82117 | 9.8 CRITICAL | Authentication Bypass by Spoofing Vulnerability in HiRDB |
| CVE-2026-82116 | 9.8 CRITICAL | Missing Authentication for Critical Function Vulnerability in HiRDB |
| CVE-2026-76934 | 9.8 CRITICAL | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-76938 | 9.8 CRITICAL | Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-76933 | 9.4 CRITICAL | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-76935 | 9.4 CRITICAL | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-76932 | 9.4 CRITICAL | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-82122 | 9.4 CRITICAL | Stack-based Buffer Overflow Vulnerability in HiRDB |
| CVE-2026-76937 | 9.4 CRITICAL | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-76936 | 9.4 CRITICAL | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 |
| CVE-2026-86577 | 9.4 CRITICAL | Out-of-bounds Write Vulnerability in JP1 Products |
| CVE-2026-86576 | 9.4 CRITICAL | Heap-based Buffer Overflow Vulnerability in JP1 Products |
| CVE-2026-86575 | 9.4 CRITICAL | Stack-based Buffer Overflow Vulnerability in JP1 Products |
| CVE-2026-82121 | 7.5 HIGH | Origin Validation Error Vulnerability in HiRDB |
IV. Related Vulnerabilities
Same product: HiRDB Server Version 10
-
CVE-2026-82117
Authentication Bypass by Spoofing Vulnerability in HiRDB -
CVE-2026-82116
Missing Authentication for Critical Function Vulnerability i -
CVE-2026-82118
Stack-based Buffer Overflow Vulnerability in HiRDB -
CVE-2026-82121
Origin Validation Error Vulnerability in HiRDB -
CVE-2026-82119
OS Command Injection Vulnerability in HiRDB
Same vendor: Hitachi
-
CVE-2026-82117
Authentication Bypass by Spoofing Vulnerability in HiRDB -
CVE-2026-82116
Missing Authentication for Critical Function Vulnerability i -
CVE-2026-82118
Stack-based Buffer Overflow Vulnerability in HiRDB -
CVE-2026-82119
OS Command Injection Vulnerability in HiRDB -
CVE-2026-82121
Origin Validation Error Vulnerability in HiRDB
Same weakness: CWE-122
-
CVE-2026-76939
Heap-based Buffer Overflow Vulnerability in JP1/Automatic Jo -
CVE-2026-76937
Heap-based Buffer Overflow Vulnerability in JP1/Automatic Jo -
CVE-2026-76933
Heap-based Buffer Overflow Vulnerability in JP1/Automatic Jo -
CVE-2026-86576
Heap-based Buffer Overflow Vulnerability in JP1 Products -
CVE-2026-86574
Heap-based Buffer Overflow Vulnerability in JP1/Base