{"id":"CVE-2026-82116","published":"2026-10-27T10:16:55.680","lastModified":"2026-10-27T15:00:49.240","description":"Missing Authentication for Critical Function Vulnerability in HiRDB.\n\n\nThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-306"],"vendors":[],"products":[],"references":[{"url":"https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-148/index.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Missing authentication check allows unauthenticated remote attackers to access critical database functions in HiRDB Server versions prior to fixed releases, enabling full compromise of confidentiality, integrity, and availability.","exploitability":"Exploitation is trivial for remote attackers as no authentication or user interaction is required; the vulnerability exists at the network-accessible service layer.","blast_radius":"Successful exploitation grants full system compromise (CIA triad) to attackers, potentially affecting all databases and users served by the vulnerable HiRDB instances.","remediation":"Upgrade HiRDB Server Version 10 to 10-12-01 or later; for Version 9 and variants, upgrade to the latest patch level (e.g., 09-66-22 for standard 9, 09-66/V for Additional Function V) as specified in vendor advisories.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","critical","database","remote-exploit"],"model":"garnet-coder","analyzedAt":"2026-10-28T09:59:42.638Z"}}