{"id":"CVE-2026-82117","kind":"vulnerability","aliases":["CVE-2026-82117"],"related":[],"title":"HiRDB: authentication bypass by spoofing lets attackers get in","description":"Authentication Bypass by Spoofing Vulnerability in HiRDB.\n\nThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.","summary":"HiRDB is a Hitachi relational database server, and several of its versions contain an authentication bypass caused by spoofing. An attacker who can reach the server can get past authentication without valid credentials, according to the NVD entry rated 9.8.","severity":"critical","cvss":9.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["database","enterprise","hirdb","on-prem","runtime"],"not_affected_if":["patched-version"],"how_to_check":"- Check the installed HiRDB Server version against the affected ranges: 10-00 to before 10-12-01, 9-00 through 09-66-22, and the 09-66/V and 09(32) variants listed in the description.\n- Confirm which HiRDB version and edition is running on each database host.","fix":"- Upgrade HiRDB Server 10 to `10-12-01` or later, per the vendor advisory (version details from NVD; the fixed version for the 9.x branches is unknown).\n- Restrict network access to the HiRDB server port to trusted hosts until patched.","status":"open","published_at":"2026-10-27T10:16:55+00:00","first_seen_at":"2026-10-27T10:31:02+00:00","triaged_at":"2026-10-27T10:31:38+00:00","updated_at":"2026-10-27T10:31:38+00:00","category":"runtime","confidence":0.6,"triage":{"at":"2026-10-27T10:31:38Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade HiRDB Server 10 to `10-12-01` or later, per the vendor advisory (version details from NVD; the fixed version for the 9.x branches is unknown).\n- Restrict network access to the HiRDB server port to trusted hosts until patched.","reach":"network","title":"HiRDB: authentication bypass by spoofing lets attackers get in","impact":"high","summary":"HiRDB is a Hitachi relational database server, and several of its versions contain an authentication bypass caused by spoofing. An attacker who can reach the server can get past authentication without valid credentials, according to the NVD entry rated 9.8.","category":"runtime","nicknames":[],"who_cares":["hirdb","database","enterprise","on-prem"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker bypasses login and accesses database data without credentials","analyst_note":"Check the Hitachi HiRDB security advisory for the fixed version of the 9.x branches and any workaround; the NVD entry alone does not give the patch for them.","how_to_check":"- Check the installed HiRDB Server version against the affected ranges: 10-00 to before 10-12-01, 9-00 through 09-66-22, and the 09-66/V and 09(32) variants listed in the description.\n- Confirm which HiRDB version and edition is running on each database host.","needs_analyst":true,"not_affected_if":["patched-version"],"who_is_affected":"Any site running an affected HiRDB Server 10 or 9 release, including the 'with Additional Function' and 9(32) builds named in the NVD description. Sites on HiRDB 10-12-01 or later, or on versions outside the listed ranges, are not listed as affected. Whether network exposure changes the risk is unknown from the sources.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000664,"input_tokens":3386,"output_tokens":651,"severity_before":"critical"},"analyst_status":null,"analyst_note":null,"search":"'-00':78C,89C,103C,130C '-01':82C '-02':115C '-12':81C '-2026':10A,13A '-22':93C,119C '-66':92C,106C,118C,133C '-82117':11A,14A '/v':107C,134C '09':88C,91C,102C,105C,114C,117C,129C,132C '10':75C,77C,80C '32':112C,127C '9':86C,100C,111C,126C '9.8':61B 'accord':55B 'addit':97C,123C 'affect':71C 'attack':7A,42B 'authent':2A,36B,51B,62C 'bypass':3A,37B,63C 'caus':38B 'contain':34B 'credenti':54B 'cve':9A,12A 'databas':15B,27B 'enterpris':16B 'entri':59B 'function':98C,124C 'get':8A,49B 'hirdb':1A,17B,22B,68C,72C,83C,94C,108C,120C 'hitachi':25B 'issu':70C 'let':6A 'nvd':58B 'on-prem':18B 'past':50B 'prem':20B 'rate':60B 'reach':45B 'relat':26B 'runtim':21B 'server':28B,47B,73C,84C,95C,109C,121C 'sever':30B 'spoof':5A,40B,65C 'valid':53B 'version':33B,74C,85C,99C,110C,125C 'vulner':66C 'without':52B","nicknames":[],"mitigations":[],"who_affected":"Any site running an affected HiRDB Server 10 or 9 release, including the 'with Additional Function' and 9(32) builds named in the NVD description. Sites on HiRDB 10-12-01 or later, or on versions outside the listed ranges, are not listed as affected. Whether network exposure changes the risk is unknown from the sources.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T10:16:55+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"hirt@hitachi.co.jp","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-82117","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82117","severity":null,"published_at":"2026-10-27T10:16:55+00:00","modified_at":"2026-10-27T10:16:55+00:00","first_seen_at":"2026-10-27T10:31:02+00:00","fetched_at":"2026-10-27T10:31:02+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}