CVE-2026-115646 · Other
NO FIX YET · SEE WHAT TO DO
HiRDB, a Hitachi relational database server, has a partial string comparison flaw, as its description names it. The sources do not say what the comparison guards, so the exact effect on an attacker is unknown, but NVD scores it critical at CVSS 9.8.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Organizations running HiRDB Server Version 10 before 10-12-01, or Version 9 builds in the listed ranges, including the additional-function and 9(32) variants. The sources do not say what the comparison guards or which configuration makes it reachable, so the exposure of any given deployment is unknown.
Not affected if version-outside-listed-ranges
Who cares database, hirdb, hitachi
10-12-01, and Version 9 from 09-50-06 through 09-66-22, plus the additional-function and Version 9(32) builds listed in the description.10-12-01 or later.Partial String Comparison Vulnerability in HiRDB.
This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-50-06 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-50-/F through 09-66/V; HiRDB Server Version 9(32): from 09-50-06 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-50-/F through 09-66-/V.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.