{"id":"CVE-2026-82117","published":"2026-10-27T10:16:55.797","lastModified":"2026-10-27T15:00:49.240","description":"Authentication Bypass by Spoofing Vulnerability in HiRDB.\n\nThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-290"],"vendors":[],"products":[],"references":[{"url":"https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-149/index.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A spoofing vulnerability in HiRDB Server allows unauthenticated attackers to bypass authentication by impersonating a legitimate client or service, granting full access to sensitive data and system functions.","exploitability":"Exploitation is straightforward for remote attackers due to lack of authentication requirements and network accessibility; no prior access or user interaction is needed.","blast_radius":"Successful exploitation could lead to complete compromise of confidentiality, integrity, and availability of the affected database systems, potentially affecting all connected applications and users.","remediation":"Upgrade HiRDB Server Version 10 to 10-12-01 or later; for Version 9, upgrade to 09-66-22 (or 09-66/V for the Additional Function variant); for 32-bit variants, upgrade to 09-66-22 (or 09-66-/V for the Additional Function variant).","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","spoofing","database","critical"],"model":"garnet-coder","analyzedAt":"2026-10-28T09:59:58.629Z"}}