{"id":"CVE-2026-86579","kind":"vulnerability","aliases":["CVE-2026-86579"],"related":[],"title":"Hitachi Dynamic Link Manager for Windows: binary planting lets local attackers run code","description":"Binary Planting Vulnerability in Hitachi Dynamic Link Manager for Windows.\n\nThis issue affects Hitachi Dynamic Link Manager for Windows: from 5.9.5-00 before 9.0.4-01.","summary":"Hitachi Dynamic Link Manager for Windows loads a library or program from an unsafe location, a flaw known as binary planting. A user who can place a file where the product looks for it can get code to run with the product's privileges.","severity":"high","cvss":8.2,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Hitachi Dynamic Link Manager for Windows","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["dynamic-link-manager","hitachi","vendor","windows"],"not_affected_if":["version-outside-range"],"how_to_check":"- Check the installed Dynamic Link Manager for Windows version against the affected range; the sources name the version range `5.9.5-00` to before `9.0.4-01`.","fix":"- Hitachi Dynamic Link Manager for Windows: move to `9.0.4-01` or later, per the affected range in the sources.","status":"open","published_at":"2026-11-10T05:18:12+00:00","first_seen_at":"2026-11-10T05:19:58+00:00","triaged_at":"2026-11-10T05:22:09+00:00","updated_at":"2026-11-10T05:22:09+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-10T05:22:09Z","model":"claude-haiku-5-5","output":{"fix":"- Hitachi Dynamic Link Manager for Windows: move to `9.0.4-01` or later, per the affected range in the sources.","reach":"local","title":"Hitachi Dynamic Link Manager for Windows: binary planting lets local attackers run code","impact":"high","summary":"Hitachi Dynamic Link Manager for Windows loads a library or program from an unsafe location, a flaw known as binary planting. A user who can place a file where the product looks for it can get code to run with the product's privileges.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["windows","hitachi","dynamic-link-manager"],"confidence":0.6,"fix_status":"available","needs_auth":"unknown","worst_case":"local attacker runs code with the product's privileges on Windows","analyst_note":"Confirm the exploit prerequisites and the privilege level of the loaded component from Hitachi's advisory or NVD detail page (https://nvd.nist.gov/vuln/detail/CVE-2026-86579).","how_to_check":"- Check the installed Dynamic Link Manager for Windows version against the affected range; the sources name the version range `5.9.5-00` to before `9.0.4-01`.\n- unknown","plain_action":"","product_name":"Hitachi Dynamic Link Manager for Windows","needs_analyst":true,"not_affected_if":["version-outside-range"],"who_is_affected":"Organizations running Hitachi Dynamic Link Manager for Windows in the affected version range. The sources do not describe the exact configuration needed to exploit it, so the exposure level is unknown beyond the affected range.","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000761,"input_tokens":4526,"output_tokens":617,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-00':98C '-01':101C '-2026':15A,18A '-86579':16A,19A '5.9.5':97C '9.0.4':100C 'affect':89C 'attack':11A 'binari':7A,52B,77C 'code':13A,69B 'cve':14A,17A 'dynam':2A,27B,34B,82C,91C 'dynamic':21A 'dynamic-link-manag':26B 'file':60B 'flaw':49B 'for':24A 'get':68B 'hitachi':1A,20A,30B,33B,81C,90C 'issu':88C 'known':50B 'let':9A 'librari':41B 'link':3A,22A,28B,35B,83C,92C 'load':39B 'local':10A 'locat':47B 'look':64B 'manag':4A,29B,36B,84C,93C 'manager':23A 'place':58B 'plant':8A,53B,78C 'privileg':76B 'product':63B,74B 'program':43B 'run':12A,71B 'unsaf':46B 'user':55B 'vendor':31B 'vulner':79C 'window':6A,32B,38B,86C,95C 'windows':25A","nicknames":[],"mitigations":[],"who_affected":"Organizations running Hitachi Dynamic Link Manager for Windows in the affected version range. The sources do not describe the exact configuration needed to exploit it, so the exposure level is unknown beyond the affected range.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["dynamiclinkmanagerforwindows","hitachidynamiclinkmanagerforwindows"],"ptokens":["dynamic","for","hitachi","link","manager","windows"],"labels":["dynamiclinkmanager","high","hitachi","vendor","windows"],"campaign_type":null,"search_a":"'-2026':15A,18A '-86579':16A,19A 'attack':11A 'binari':7A 'code':13A 'cve':14A,17A 'dynam':2A 'dynamic':21A 'for':24A 'hitachi':1A,20A 'let':9A 'link':3A,22A 'local':10A 'manag':4A 'manager':23A 'plant':8A 'run':12A 'window':6A 'windows':25A","search_b":"'binari':52B 'code':69B 'dynam':27B,34B 'dynamic-link-manag':26B 'file':60B 'flaw':49B 'get':68B 'hitachi':30B,33B 'known':50B 'librari':41B 'link':28B,35B 'load':39B 'locat':47B 'look':64B 'manag':29B,36B 'place':58B 'plant':53B 'privileg':76B 'product':63B,74B 'program':43B 'run':71B 'unsaf':46B 'user':55B 'vendor':31B 'window':32B,38B","search_c":"'-00':98C '-01':101C '5.9.5':97C '9.0.4':100C 'affect':89C 'binari':77C 'dynam':82C,91C 'hitachi':81C,90C 'issu':88C 'link':83C,92C 'manag':84C,93C 'plant':78C 'vulner':79C 'window':86C,95C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T05:18:12+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","cvss_by":"hirt@hitachi.co.jp","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-86579","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86579","severity":null,"published_at":"2026-11-10T05:18:12+00:00","modified_at":"2026-11-10T05:18:12+00:00","first_seen_at":"2026-11-10T05:19:58+00:00","fetched_at":"2026-11-10T05:19:58+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}