{"id":"CVE-2026-82121","kind":"vulnerability","aliases":["CVE-2026-82121"],"related":[],"title":"HiRDB: origin validation flaw in database server versions 9 and 10","description":"Origin Validation Error Vulnerability in HiRDB.\n\n\nThis issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.","summary":"HiRDB, a Hitachi relational database server, has an origin validation error that the sources do not detail further. The NVD entry rates it high (CVSS 7.5), which suggests a remote attacker could reach the server and affect data or service.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["database","hirdb","hitachi","other"],"not_affected_if":[],"how_to_check":"- Check the installed HiRDB Server version against the affected ranges: Version 10 before `10-12-01`, Version 9 from `09-00` through `09-66-22`, and the 9(32) and Additional Function variants listed in the NVD entry.\n- unknown for other checks: the sources do not say which configuration or port exposes the flaw.","fix":"- Move HiRDB Server Version 10 to `10-12-01` or later, per the vendor advisory.\n- unknown for Version 9 fixes: the sources do not name a fixed Version 9 release.","status":"open","published_at":"2026-10-27T10:16:56+00:00","first_seen_at":"2026-10-27T10:31:03+00:00","triaged_at":"2026-10-27T10:31:57+00:00","updated_at":"2026-10-27T10:31:57+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-10-27T10:31:57Z","model":"claude-haiku-5-5","output":{"fix":"- Move HiRDB Server Version 10 to `10-12-01` or later, per the vendor advisory.\n- unknown for Version 9 fixes: the sources do not name a fixed Version 9 release.","reach":"unknown","title":"HiRDB: origin validation flaw in database server versions 9 and 10","impact":"high","summary":"HiRDB, a Hitachi relational database server, has an origin validation error that the sources do not detail further. The NVD entry rates it high (CVSS 7.5), which suggests a remote attacker could reach the server and affect data or service.","category":"other","nicknames":[],"who_cares":["hirdb","database","hitachi"],"confidence":0.5,"needs_auth":"unknown","worst_case":"unknown; attacker impact not stated in the sources","analyst_note":"Find the Hitachi advisory for HiRDB CVE-2026-82121 to confirm the attack vector, the affected configuration and the Version 9 fixed release.","how_to_check":"- Check the installed HiRDB Server version against the affected ranges: Version 10 before `10-12-01`, Version 9 from `09-00` through `09-66-22`, and the 9(32) and Additional Function variants listed in the NVD entry.\n- unknown for other checks: the sources do not say which configuration or port exposes the flaw.","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Teams running any listed HiRDB Server version, including the Additional Function and 9(32) variants. The sources do not say what configuration makes a deployment exposed, so unknown whether a default install is affected.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000632,"input_tokens":3373,"output_tokens":589,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-00':76C,87C,101C,128C '-01':80C '-02':113C '-12':79C '-2026':13A,16A '-22':91C,117C '-66':90C,104C,116C,131C '-82121':14A,17A '/v':105C,132C '09':86C,89C,100C,103C,112C,115C,127C,130C '10':11A,73C,75C,78C '32':110C,125C '7.5':46B '9':9A,84C,98C,109C,124C 'addit':95C,121C 'affect':57B,69C 'attack':51B 'could':52B 'cve':12A,15A 'cvss':45B 'data':58B 'databas':6A,18B,25B 'detail':37B 'entri':41B 'error':31B,63C 'flaw':4A 'function':96C,122C 'high':44B 'hirdb':1A,19B,21B,66C,70C,81C,92C,106C,118C 'hitachi':20B,23B 'issu':68C 'nvd':40B 'origin':2A,29B,61C 'rate':42B 'reach':53B 'relat':24B 'remot':50B 'server':7A,26B,55B,71C,82C,93C,107C,119C 'servic':60B 'sourc':34B 'suggest':48B 'valid':3A,30B,62C 'version':8A,72C,83C,97C,108C,123C 'vulner':64C","nicknames":[],"mitigations":[],"who_affected":"Teams running any listed HiRDB Server version, including the Additional Function and 9(32) variants. The sources do not say what configuration makes a deployment exposed, so unknown whether a default install is affected.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T10:16:56+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_by":"hirt@hitachi.co.jp","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-82121","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82121","severity":null,"published_at":"2026-10-27T10:16:56+00:00","modified_at":"2026-10-27T10:16:56+00:00","first_seen_at":"2026-10-27T10:31:03+00:00","fetched_at":"2026-10-27T10:31:03+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}