CVE-2026-82119

CriticalCVSS 9.8/10Last modified Nov 4, 2026

Description

OS Command Injection Vulnerability in HiRDB.

This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
Hitachi	HiRDB Server Version 10	>= 10-00, < 10-12-01
Hitachi	HiRDB Server Version 9	>= 09-00, <= 09-66-22
Hitachi	HiRDB Server with Additional Function Version 9	>= 09-00, <= 09-66/V
Hitachi	HiRDB Server Version 9(32)	>= 09-02, <= 09-66-22
Hitachi	HiRDB Server with Additional Function Version 9(32)	>= 09-00, <= 09-66-/V

References

https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-146/index.html

Timeline

Published: Oct 27, 2026
Last modified: Nov 4, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-82125.5A flaw has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this vulnerability is the function SWSDfldsrch of the file frmts/hdf4/hdf CVE-2026-821209.8Heap-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Ve CVE-2026-821217.5Origin Validation Error Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Versi CVE-2026-821229.4Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server V CVE-2026-821236.5Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Tangible Loops & Logic.CVE-2026-821245.3The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check whether a post is password protected before including CVE-2026-821255.3The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not correctly verify the ownership or the moderation status of a CVE-2026-821262.7The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check that a user is allowed to edit the specific post they CVE-2026-821273.5The Schema & Structured Data for WP & AMP WordPress plugin before 1.67 does not perform a capability check when saving several of its fields CVE-2026-82135.5A vulnerability has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this issue is the function GDSDfldsrch of the file frmts/hdf4/hd CVE-2026-82145.3A vulnerability was found in Industrial Application Software IAS Canias ERP 8.03. This affects the function doAction of the component RMI In CVE-2026-82155.3A vulnerability was determined in Industrial Application Software IAS Canias ERP 8.03. This vulnerability affects the function iasRequestFil