{"id":"CVE-2026-82826","published":"2026-10-01T05:17:10.633","lastModified":"2026-10-01T16:18:04.650","description":"Hitachi Coding Software Suite contains a vulnerability related to the Cleartext Transmission of Sensitive Information which allows an attacker to eavesdrop on with authentication credentials and sensitive data in transit.\n\n\nThis issue affects Hitachi Coding Software Suite: through 3.3.0.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-319"],"vendors":[],"products":[],"references":[{"url":"https://www.hitachi-ies.com/common/documents/vulnerability/hcss/Hitachi_Coding_Software_Suite_Public_statement_20260925_EN.pdf","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The Hitachi Coding Software Suite transmits sensitive information in cleartext over the network, making it vulnerable to eavesdropping attacks that can capture authentication credentials and other sensitive data. This vulnerability allows attackers to intercept and read confidential information during transit without requiring any special privileges or user interaction.","exploitability":"Exploitation is relatively straightforward as attackers only need to position themselves on the network path between the client and server to capture cleartext traffic, with no authentication required for the initial attack.","blast_radius":"The impact could be significant across all users of the software suite who communicate with servers over unencrypted connections, potentially exposing authentication tokens, user credentials, and sensitive application data to passive network monitoring.","remediation":"Upgrade to version 3.3.1 or later to address the cleartext transmission vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["network","cleartext","credentials","transmission"],"model":"garnet-coder","analyzedAt":"2026-10-13T09:06:35.804Z"}}