CVE-2026-92966

Hitachi Coding Software Suite up to version 3.3.0 contains a hidden functionality vulnerability that allows an attacker to gain unauthorized access by exploiting hidden accounts or hard-coded credentials.

Hitachi Coding Software Suite up to version 3.3.0 uses a hard-coded cryptographic key for JWT signing, allowing an attacker to generate unauthorized Bearer tokens and exploit administrative functions.

Hitachi Coding Software Suite up to version 3.3.0 has missing authentication for critical functions. An unauthenticated attacker can invoke critical APIs, potentially leading to unauthorized retrieval or alteration of sensitive information.

Hitachi Coding Software Suite up to version 3.3.0 contains a Path Traversal vulnerability that allows an attacker to access, create, modify, or delete files.

Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions.

Use of an externally controlled format string in ASUS Router modules allows a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface.

iperf3 3.20–3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length (guard warns only), so an unauthenticated client overflows the heap via an oversized authtoken; fixed in 3.22

Kiteworks Email Protection Gateway did not sufficiently restrict which account a certificate could be assigned to. This could allow an attacker to associate a certificate with another user's account, affecting the confidentiality and integrity of that account's encrypted mail and, where certificate-based login is enabled, potentially permitting unauthorized access to the account.

A stored cross-site scripting (XSS) weakness in Kiteworks Core could allow an unauthenticated attacker to store crafted content that later executes arbitrary JavaScript in the authenticated session of an administrator who views the affected page. This could have permitted the attacker to gain full administrative control, including the creation of a new administrative account.

Kiteworks Core did not correctly validate a parameter submitted to the password reset workflow. An unauthenticated attacker who knew the email address of a user with a locally stored password could potentially reset that account's password without access to the emailed reset link and then authenticate as that user, including where the account holds administrative privileges.