CVE-2026-115646

{
  "etk_id": "ETK-2026-4028",
  "cve_id": "CVE-2026-115646",
  "display_id": "CVE-2026-115646",
  "ghsa_id": "GHSA-h93x-23hm-mq8h",
  "euvd_id": "EUVD-2026-120764",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Partial string comparison flaw in HiRDB Server",
  "summary": "HiRDB Server Version 10 before 10-12-01 and the listed Version 9 and Version 9(32) releases are affected by a partial string comparison weakness. An unauthenticated network attacker may be able to exploit the faulty comparison when an affected service is reachable, but the available evidence does not describe the resulting impact.",
  "mitigation": "Upgrade HiRDB Server Version 10 to 10-12-01 or later. For affected Version 9 variants, restrict network access to trusted clients and obtain vendor guidance for a supported upgrade or replacement.",
  "vendor": "Hitachi",
  "product": "HiRDB Server Version 10",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 10-00, < 10-12-01"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "10-12-01"
      ],
      "package_name": "HiRDB Server Version 10",
      "purl": null
    },
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 09-50-06, <= 09-66-22"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "HiRDB Server Version 9",
      "purl": null
    },
    {
      "affected_notes": [
        ">= 09-50-/F, <= 09-66/V"
      ],
      "affected_ranges": [],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "HiRDB Server with Additional Function Version 9",
      "purl": null
    },
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 09-50-06, <= 09-66-22"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "HiRDB Server Version 9(32)",
      "purl": null
    },
    {
      "affected_notes": [
        ">= 09-50-/F, <= 09-66-/V"
      ],
      "affected_ranges": [],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "HiRDB Server with Additional Function Version 9(32)",
      "purl": null
    }
  ],
  "cwes": [
    187
  ],
  "cvss_score": 9.8,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 7.0846098,
  "t0_at": "2026-11-10T04:44:44.767000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-10T04:44:44.767000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-10T04:44:44.767000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-115646"
    }
  }
}