{"id":"CVE-2026-91755","kind":"vulnerability","aliases":["CVE-2026-91755"],"related":[],"title":"Hitachi Dynamic Link Manager for VMware: integer overflow enables attack","description":"Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware.\n\nThis issue affects Hitachi Dynamic Link Manager for VMware: from 8.7.3-00 before 9.0.4-01.","summary":"Hitachi Dynamic Link Manager for VMware has an integer overflow flaw in versions from 8.7.3-00 before 9.0.4-01. The sources do not state what an attacker gets beyond the overflow itself.","severity":"high","cvss":8.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["enterprise","hitachi-dynamic-link-manager","vendor","vmware"],"not_affected_if":["version-outside-range"],"how_to_check":"- Check the installed Dynamic Link Manager for VMware version against the affected range `8.7.3-00` to before `9.0.4-01`","fix":"- Move Hitachi Dynamic Link Manager for VMware to `9.0.4-01` or later","status":"open","published_at":"2026-11-10T05:18:13+00:00","first_seen_at":"2026-11-10T05:19:58+00:00","triaged_at":"2026-11-10T05:22:14+00:00","updated_at":"2026-11-10T05:22:14+00:00","category":"vendor","confidence":0.5,"triage":{"at":"2026-11-10T05:22:14Z","model":"claude-haiku-5-5","output":{"fix":"- Move Hitachi Dynamic Link Manager for VMware to `9.0.4-01` or later","reach":"unknown","title":"Hitachi Dynamic Link Manager for VMware: integer overflow enables attack","impact":"medium","summary":"Hitachi Dynamic Link Manager for VMware has an integer overflow flaw in versions from 8.7.3-00 before 9.0.4-01. The sources do not state what an attacker gets beyond the overflow itself.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["vmware","hitachi-dynamic-link-manager","enterprise"],"confidence":0.5,"fix_status":"available","needs_auth":"unknown","worst_case":"unknown; sources do not state what an attacker gets","analyst_note":"Check Hitachi's advisory for the attack vector, privileges required and impact; NVD alone gives only the CVSS 8.1 score and the affected range.","how_to_check":"- Check the installed Dynamic Link Manager for VMware version against the affected range `8.7.3-00` to before `9.0.4-01`\n- unknown for other checks: the sources do not say","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["version-outside-range"],"who_is_affected":"Organizations running Hitachi Dynamic Link Manager for VMware from 8.7.3-00 before 9.0.4-01 are affected. The sources do not describe the data path or configuration that makes a system exposed, so unknown whether a default setup is reachable.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000739,"input_tokens":4528,"output_tokens":572,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-00':40B,77C '-01':43B,80C '-2026':12A,15A '-91755':13A,16A '8.7.3':39B,76C '9.0.4':42B,79C 'affect':68C 'attack':10A,51B 'beyond':53B 'cve':11A,14A 'dynam':2A,20B,26B,61C,70C 'enabl':9A 'enterpris':17B 'flaw':35B 'get':52B 'hitachi':1A,19B,25B,60C,69C 'hitachi-dynamic-link-manag':18B 'integ':7A,33B,56C 'issu':67C 'link':3A,21B,27B,62C,71C 'manag':4A,22B,28B,63C,72C 'overflow':8A,34B,55B,57C 'sourc':45B 'state':48B 'vendor':23B 'version':37B 'vmware':6A,24B,30B,65C,74C 'vulner':58C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Hitachi Dynamic Link Manager for VMware from 8.7.3-00 before 9.0.4-01 are affected. The sources do not describe the data path or configuration that makes a system exposed, so unknown whether a default setup is reachable.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["enterprise","high","hitachidynamiclinkmanager","vendor","vmware"],"campaign_type":null,"search_a":"'-2026':12A,15A '-91755':13A,16A 'attack':10A 'cve':11A,14A 'dynam':2A 'enabl':9A 'hitachi':1A 'integ':7A 'link':3A 'manag':4A 'overflow':8A 'vmware':6A","search_b":"'-00':40B '-01':43B '8.7.3':39B '9.0.4':42B 'attack':51B 'beyond':53B 'dynam':20B,26B 'enterpris':17B 'flaw':35B 'get':52B 'hitachi':19B,25B 'hitachi-dynamic-link-manag':18B 'integ':33B 'link':21B,27B 'manag':22B,28B 'overflow':34B,55B 'sourc':45B 'state':48B 'vendor':23B 'version':37B 'vmware':24B,30B","search_c":"'-00':77C '-01':80C '8.7.3':76C '9.0.4':79C 'affect':68C 'dynam':61C,70C 'hitachi':60C,69C 'integ':56C 'issu':67C 'link':62C,71C 'manag':63C,72C 'overflow':57C 'vmware':65C,74C 'vulner':58C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T05:18:13+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"hirt@hitachi.co.jp","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-91755","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91755","severity":null,"published_at":"2026-11-10T05:18:13+00:00","modified_at":"2026-11-10T05:18:13+00:00","first_seen_at":"2026-11-10T05:19:58+00:00","fetched_at":"2026-11-10T05:19:58+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}