Threat level Severe
Contact
Critical 9.8
CVE-2026-82119

Hitachi HiRDB Server Version 10 — command injection.

OS Command Injection Vulnerability in HiRDB.

WeaknessCWE-78: Command injection
Published Updated Source NVD
Read vendor advisoryView on NVD
CVSS 3.1
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploit chance, 30 days
1.0%
Higher than 64% of all CVEs (EPSS)
Status
No known exploitation
Not in CISA KEV
Patch
Unknown
Check the vendor advisory

What happened

OS Command Injection Vulnerability in HiRDB.

This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.

What to do

  1. 01Check whether you run Hitachi HiRDB Server Version 10, and which version.
  2. 02Follow the vendor advisory for a fix or a workaround.

References

Timeline · UTC

  1. Published to NVD
  2. NVD record updated

Also actively exploited

CVE-2026-764188.6Cisco Secure Firewall ASA Software and Cisco Secure FTD SoftwareCVE-2026-1146259.9Arista VeloCloud OrchestratorCVE-2026-1114979.8Google Brotli
Vendor
Hitachi18 CVEs in 30 days
All Hitachi CVEs

Other CVEs in Hitachi HiRDB Server Version 10

5 more CVEs

All Hitachi HiRDB Server Version 10 CVEs
9.8Hitachi HiRDB Server Version 10 — buffer overflow.EPSS 0.4%9.4Hitachi HiRDB Server Version 10 — buffer overflow.EPSS 0.5%9.8Hitachi HiRDB Server Version 10 — missing authentication.EPSS 0.6%9.8Hitachi HiRDB Server Version 10 — authentication bypass.EPSS 0.6%9.8Hitachi HiRDB Server Version 10 — buffer overflow.EPSS 0.5%