CVE-2026-82116
waiting for further signalsZero needs more public information before it can validate it.GHSA-7xjc-jfg7-54x7 ↗EUVD-2026-110667 ↗
description
HiRDB Server Version 10 before 10-12-01 and the listed Version 9 and Version 9(32) variants are affected by missing authentication for a critical function. An unauthenticated remote attacker who can reach an affected service may access that function and compromise confidentiality, integrity, or availability.
mitigation
Upgrade HiRDB Server Version 10 to 10-12-01 or later. For affected Version 9 variants, restrict service access to trusted administrative networks until vendor remediation or guidance is available.
fixed in 10-12-01
outcome
Contextual, not validated: no deterministic check could cover this one, and no technique passed our review.
source signals
Public signals that triggered or updated the pipeline. These are inputs for the deltas above.
- 2026-10-27 09:37Zcve_org: trigger signal, started the run
this entry in the feed
GET /api/v1/feed/CVE-2026-82116
{ "etk_id": "ETK-2026-2746", "cve_id": "CVE-2026-82116", "display_id": "CVE-2026-82116", "ghsa_id": "GHSA-7xjc-jfg7-54x7", "euvd_id": "EUVD-2026-110667", "status": "published", "anchor_state": "anchored", "title": "Missing authentication for critical functions in HiRDB Server", "summary": "HiRDB Server Version 10 before 10-12-01 and the listed Version 9 and Version 9(32) variants are affected by missing authentication for a critical function. An unauthenticated remote attacker who can reach an affected service may access that function and compromise confidentiality, integrity, or availability.", "mitigation": "Upgrade HiRDB Server Version 10 to 10-12-01 or later. For affected Version 9 variants, restrict service access to trusted administrative networks until vendor remediation or guidance is available.", "vendor": "Hitachi", "product": "HiRDB Server Version 10", "affected": [ { "affected_notes": [], "affected_ranges": [ ">= 10-00, < 10-12-01" ], "ecosystem": null, "fixed_versions": [ "10-12-01" ], "package_name": "HiRDB Server Version 10", "purl": null }, { "affected_notes": [], "affected_ranges": [ ">= 09-00, <= 09-66-22" ], "ecosystem": null, "fixed_versions": [], "package_name": "HiRDB Server Version 9", "purl": null }, { "affected_notes": [ ">= 09-00, <= 09-66/V" ], "affected_ranges": [], "ecosystem": null, "fixed_versions": [], "package_name": "HiRDB Server with Additional Function Version 9", "purl": null }, { "affected_notes": [], "affected_ranges": [ ">= 09-02, <= 09-66-22" ], "ecosystem": null, "fixed_versions": [], "package_name": "HiRDB Server Version 9(32)", "purl": null }, { "affected_notes": [ ">= 09-00, <= 09-66-/V" ], "affected_ranges": [], "ecosystem": null, "fixed_versions": [], "package_name": "HiRDB Server with Additional Function Version 9(32)", "purl": null } ], "cwes": [ 306 ], "cvss_score": 9.8, "cvss_src": "cna_vendor", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss_score": null, "epss_percentile": null, "epss_asof": null, "automation": "contextual", "check": false, "check_confidence_basis": null, "exploit": false, "pipeline_minutes": 10.0731649, "t0_at": "2026-10-27T09:37:25.232000+00:00", "signals": { "trigger_signal": { "at": "2026-10-27T09:37:25.232000+00:00", "days": 0, "is_lower_bound": false, "measured_at": "2026-10-27T09:37:25.232000+00:00", "url": "https://www.cve.org/CVERecord?id=CVE-2026-82116" } } }
published 2026-10-27 10:25Z
last change 2026-10-27 13:52Z
Need the technical details behind an entry?
Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.