---
id: "CVE-2026-115646"
page: "https://infrastack.ai/live/CVE-2026-115646"
kind: "vulnerability"
aliases: ["CVE-2026-115646"]
title: "HiRDB: partial string comparison flaw in database server authentication"
severity: "critical"
cvss: 9.8
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["database", "hirdb", "hitachi", "other"]
not_affected_if: ["version-outside-listed-ranges"]
published_at: "2026-11-10T05:17:48+00:00"
first_seen_at: "2026-11-10T05:19:58+00:00"
updated_at: "2026-11-10T05:22:09+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-115646", "first_seen_at": "2026-11-10T05:19:58+00:00"}]
exploit_sources: []
---

# HiRDB: partial string comparison flaw in database server authentication

Link for people: https://infrastack.ai/live/CVE-2026-115646 (this .md is for agents)

HiRDB, a Hitachi relational database server, has a partial string comparison flaw, as its description names it. The sources do not say what the comparison guards, so the exact effect on an attacker is unknown, but NVD scores it critical at CVSS 9.8.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed HiRDB Server version against the affected ranges: Version 10 before `10-12-01`, and Version 9 from `09-50-06` through `09-66-22`, plus the additional-function and Version 9(32) builds listed in the description.

## Fix

- Move HiRDB Server Version 10 to `10-12-01` or later.
- The sources do not name a fixed build for the Version 9 line.

## Timeline

- 2026-11-10T05:19:58+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-115646

## From the sources

Partial String Comparison Vulnerability in HiRDB.


This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-50-06 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-50-/F through 09-66/V; HiRDB Server Version 9(32): from 09-50-06 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-50-/F through 09-66-/V.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_