Live › vulnerability › CVE-2026-82119
Go to dashboardHiRDB, a Japanese relational database server, has an OS command injection flaw in several version 9 and version 10 branches. The sources do not say which input triggers it, but an attacker who can reach the affected service can likely run commands on the host with the server's privileges.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 10:31 UTC. All times on this page are UTC.
Teams running HiRDB Server in the affected version ranges, including those with the Additional Function package, are exposed. The sources do not state which configuration or interface triggers the injection, so the exposure of any given deployment is unknown. Systems running only other databases, or HiRDB versions outside the listed ranges, are not affected.
No product ranges from the sources yet.
10-12-01, Version 9 from 09-00 through 09-66-22, and Version 9(32) from 09-02 through 09-66-22, including the 'with Additional Function' variants.unknown to confirm the exact version command; the sources do not give one.10-12-01 or later.09-66-22, and the Additional Function variants to a fixed release (the sources do not name the version).Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
OS Command Injection Vulnerability in HiRDB.
This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.
This page as .md · .json · in your agent: get_signal("CVE-2026-82119")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.