{"id":"CVE-2026-82119","published":"2026-10-27T10:16:56.033","lastModified":"2026-10-27T15:00:49.240","description":"OS Command Injection Vulnerability in HiRDB.\n\n\nThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-78"],"vendors":[],"products":[],"references":[{"url":"https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-146/index.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"OS command injection in HiRDB Server allows unauthenticated remote attackers to execute arbitrary OS commands via unsanitized user input, leading to full system compromise.","exploitability":"Exploitation is trivial for remote attackers due to lack of authentication or input validation; no special privileges or user interaction required.","blast_radius":"Successful exploitation grants full read/write/execute access to the underlying OS, enabling data exfiltration, lateral movement, and infrastructure takeover.","remediation":"Upgrade HiRDB Server Version 10 to 10-12-01 or later; for all other affected versions (9.x and 9(32)x), apply vendor-supplied patches or upgrade to the latest fixed release as specified by Fujitsu.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["os-command-injection","rce","hirdb","critical","no-auth"],"model":"garnet-coder","analyzedAt":"2026-10-28T10:00:28.912Z"}}