{"id":"CVE-2026-82118","published":"2026-10-27T10:16:55.917","lastModified":"2026-10-27T15:00:49.240","description":"Stack-based Buffer Overflow Vulnerability in HiRDB.\n\n\nThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-121"],"vendors":[],"products":[],"references":[{"url":"https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-147/index.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A stack-based buffer overflow in HiRDB Server allows remote attackers to overwrite the stack and potentially execute arbitrary code without authentication by sending a specially crafted request to the database server.","exploitability":"Exploitation is straightforward for remote attackers since no authentication, user interaction, or special conditions are required (CVSS vector AV:N/AC:L/PR:N/UI:N).","blast_radius":"Successful exploitation could lead to full system compromise including remote code execution, data exfiltration, and service disruption on any affected HiRDB instance exposed to the network.","remediation":"Upgrade HiRDB Server Version 10 to 10-12-01 or later; upgrade HiRDB Server Version 9 to 09-66-23 or later (if available); upgrade HiRDB Server with Additional Function Version 9 to 09-66/V or later (if available); upgrade HiRDB Server Version 9(32) to 09-66-23 or later; upgrade HiRDB Server with Additional Function Version 9(32) to 09-66-/V or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["buffer-overflow","stack-overflow","rce","db-server","ics"],"model":"garnet-coder","analyzedAt":"2026-10-28T10:00:15.625Z"}}