CVE-2026-82119
CriticalCVSS 9.8Summary
OS command injection vulnerability in Hitachi HiRDB. It affects HiRDB Server Version 10 (from 10-00 before 10-12-01) and HiRDB Server Version 9 and additional-function variants in specified version ranges. The flaw may allow execution of arbitrary commands on the system.
Risk Assessment
Could allow an attacker to execute arbitrary system commands on the database server, potentially leading to full host compromise. Impacts a critical organizational database system.
Recommendation
Update HiRDB to at least version 10-12-01 or apply fixes for version 9 per vendor guidance. Until patched, restrict network access to the HiRDB server and monitor for unusual commands.
Other vulnerabilities in HiRDB
See all- CVE-2026-82121High
Origin Validation Error Vulnerability in HiRDB. This issue affects HiRDB Server Version 10 (from 10-00 before 10-12-01) and Version 9 and 9(32), including variants with Additional Function.
- CVE-2026-82122Critical
Stack-based buffer overflow vulnerability in Hitachi HiRDB. It affects HiRDB Server Version 10 (from 10-00 before 10-12-01) and HiRDB Server Version 9 and additional-function variants in specified version ranges. The flaw can corrupt stack memory.
- CVE-2026-82120Critical
Heap-based buffer overflow vulnerability in Hitachi HiRDB. It affects HiRDB Server Version 10 (from 10-00 before 10-12-01) and HiRDB Server Version 9 and additional-function variants in specified version ranges. The flaw can corrupt heap memory.
- CVE-2026-82118Critical
Stack-based buffer overflow vulnerability in Hitachi HiRDB. It affects HiRDB Server Version 10 (from 10-00 before 10-12-01) and HiRDB Server Version 9 and additional-function variants in specified version ranges. The flaw can corrupt stack memory.
- CVE-2026-82117Critical
Authentication bypass by spoofing vulnerability in Hitachi HiRDB. It affects HiRDB Server Version 10 (from 10-00 before 10-12-01) and HiRDB Server Version 9 and additional-function variants in specified version ranges. The flaw may allow unauthorized access.
- CVE-2026-82116Critical
Missing authentication for critical function vulnerability in Hitachi HiRDB. It affects HiRDB Server Version 10 (from 10-00 before 10-12-01) and HiRDB Server Version 9 and additional-function variants in specified version ranges. The flaw may allow access to critical functions without authentication.
Original NVD description (English source)
OS Command Injection Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS