CVE-2026-115646
CriticalCVSS 9.8Summary
A partial string comparison vulnerability in HiRDB. The issue affects HiRDB Server Version 10 (from 10-00 before 10-12-01) and Version 9 (from 09-50-06 through 09-66-22), including versions with additional functions.
Risk Assessment
Improper string comparison may lead to incorrect input validation and potential bypass of database security mechanisms.
Recommendation
Update HiRDB Server to version 10-12-01 or later (for version 10) and to the latest fixed release for the version 9 line.
Other vulnerabilities in HiRDB
See all- CVE-2026-82122Critical
Stack-based buffer overflow vulnerability in Hitachi HiRDB. It affects HiRDB Server Version 10 (from 10-00 before 10-12-01) and HiRDB Server Version 9 and additional-function variants in specified version ranges. The flaw can corrupt stack memory.
- CVE-2026-82120Critical
Heap-based buffer overflow vulnerability in Hitachi HiRDB. It affects HiRDB Server Version 10 (from 10-00 before 10-12-01) and HiRDB Server Version 9 and additional-function variants in specified version ranges. The flaw can corrupt heap memory.
- CVE-2026-82119Critical
OS command injection vulnerability in Hitachi HiRDB. It affects HiRDB Server Version 10 (from 10-00 before 10-12-01) and HiRDB Server Version 9 and additional-function variants in specified version ranges. The flaw may allow execution of arbitrary commands on the system.
- CVE-2026-82118Critical
Stack-based buffer overflow vulnerability in Hitachi HiRDB. It affects HiRDB Server Version 10 (from 10-00 before 10-12-01) and HiRDB Server Version 9 and additional-function variants in specified version ranges. The flaw can corrupt stack memory.
- CVE-2026-82117Critical
Authentication bypass by spoofing vulnerability in Hitachi HiRDB. It affects HiRDB Server Version 10 (from 10-00 before 10-12-01) and HiRDB Server Version 9 and additional-function variants in specified version ranges. The flaw may allow unauthorized access.
- CVE-2026-82116Critical
Missing authentication for critical function vulnerability in Hitachi HiRDB. It affects HiRDB Server Version 10 (from 10-00 before 10-12-01) and HiRDB Server Version 9 and additional-function variants in specified version ranges. The flaw may allow access to critical functions without authentication.
- CVE-2026-82121High
Origin Validation Error Vulnerability in HiRDB. This issue affects HiRDB Server Version 10 (from 10-00 before 10-12-01) and Version 9 and 9(32), including variants with Additional Function.
Original NVD description (English source)
Partial String Comparison Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-50-06 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-50-/F through 09-66/V; HiRDB Server Version 9(32): from 09-50-06 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-50-/F through 09-66-/V.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS