Hitachi vulnerabilities

We track 90 vulnerabilities in Hitachi products across 60+ products. 90 are rated high or critical, and 2 have been exploited in real attacks. The most recent was published on November 10, 2026.

90vulnerabilities

33critical

57high

2exploited

8.5average CVSS score

Latest Hitachi vulnerabilities

7.3 High severity
Hitachi Dynamic Link Manager for AIX: UNIX Symbolic Link (Symlink) Following
CVE-2026-92864Nov 10, 2026Hitachi
Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for AIX (for markets outside Japan) and Hitachi Dynamic Link Manager EX for AIX (for the Japanese market). This issue affects Hitachi Dynamic Link Manager for AIX: from 7.4.1-00 before 9.0.4
7.0 High severity
Hitachi Dynamic Link Manager for AIX: Integer Overflow or Wraparound
CVE-2026-92863Nov 10, 2026Hitachi
Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for AIX (for the Japanese market). This issue affects Hitachi Dynamic Link Manager for AIX: before 9.0.4-01.
8.1 High severity
Hitachi Dynamic Link Manager for Linux: Improper Link Resolution Before File Access
CVE-2026-91764Nov 10, 2026Hitachi
Improper Link Resolution Before File Access Vulnerability in Hitachi Dynamic Link Manager for Linux. This issue affects Hitachi Dynamic Link Manager for Linux: from 6.1.1.-00 before 9.0.5-00.
8.2 High severity
Hitachi Dynamic Link Manager for Linux: UNIX Symbolic Link (Symlink) Following
CVE-2026-91763Nov 10, 2026Hitachi
UNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux. This issue affects Hitachi Dynamic Link Manager for Linux: from 8.6.2.-00 before 9.0.5-00.
7.9 High severity
Hitachi Dynamic Link Manager for Linux: UNIX Symbolic Link (Symlink) Following
CVE-2026-91762Nov 10, 2026Hitachi
UNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux. This issue affects Hitachi Dynamic Link Manager for Linux: from 8.5.3.-00 before 9.0.5-00.
8.2 High severity
Hitachi Dynamic Link Manager for Linux: UNIX Symbolic Link (Symlink) Following
CVE-2026-91761Nov 10, 2026Hitachi
UNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux. This issue affects Hitachi Dynamic Link Manager for Linux: from 8.6.2.-00 before 9.0.5-00.
7.0 High severity
Hitachi Dynamic Link Manager for Linux: Heap-based Buffer Overflow
CVE-2026-91760Nov 10, 2026Hitachi
Heap-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for Linux. This issue affects Hitachi Dynamic Link Manager for Linux: from 7.5.0-00 before 9.0.5-00.
7.8 High severity
Hitachi Dynamic Link Manager for Linux: Out-of-bounds Write
CVE-2026-91759Nov 10, 2026Hitachi
Out-of-Bounds Write Vulnerability in Hitachi Dynamic Link Manager for Linux. This issue affects Hitachi Dynamic Link Manager for Linux: from 7.5.0-00 before 9.0.5-00.
7.8 High severity
Hitachi Dynamic Link Manager for Linux: Incorrect Calculation of Buffer Size
CVE-2026-91758Nov 10, 2026Hitachi
Out-of-bounds Read and Write Vulnerability in Hitachi Dynamic Link Manager for Linux. This issue affects Hitachi Dynamic Link Manager for Linux: from 7.5.0-00 before 9.0.5-00.
7.1 High severity
Hitachi Dynamic Link Manager for VMware: Improper Neutralization of Special Elements used in an OS Command
CVE-2026-91757Nov 10, 2026Hitachi
OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware. This issue affects Hitachi Dynamic Link Manager for VMware: from 7.3.0-00 before 9.0.4-01.
8.1 High severity
Hitachi Dynamic Link Manager for VMware: Improper Neutralization of Special Elements used in an OS Command
CVE-2026-91756Nov 10, 2026Hitachi
OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware. This issue affects Hitachi Dynamic Link Manager for VMware: from 8.7.3-00 before 9.0.4-01.
8.1 High severity
Hitachi Dynamic Link Manager for VMware: Integer Overflow or Wraparound
CVE-2026-91755Nov 10, 2026Hitachi
Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware. This issue affects Hitachi Dynamic Link Manager for VMware: from 8.7.3-00 before 9.0.4-01.
8.1 High severity
Hitachi Dynamic Link Manager for VMware: Stack-based Buffer Overflow
CVE-2026-91754Nov 10, 2026Hitachi
Stack-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware. This issue affects Hitachi Dynamic Link Manager for VMware: from 8.7.3-00 before 9.0.4-01.
8.2 High severity
Hitachi Dynamic Link Manager for Windows: Uncontrolled Search Path Element
CVE-2026-86579Nov 10, 2026Hitachi
Binary Planting Vulnerability in Hitachi Dynamic Link Manager for Windows. This issue affects Hitachi Dynamic Link Manager for Windows: from 5.9.5-00 before 9.0.4-01.
7.3 High severity
Hitachi Dynamic Link Manager for Windows: Improper Link Resolution Before File Access
CVE-2026-86578Nov 10, 2026Hitachi
Link Following Vulnerability in Hitachi Dynamic Link Manager for Windows. This issue affects Hitachi Dynamic Link Manager for Windows: from 5.0.0-03 before 9.0.4-01.
9.8 Critical severity
HiRDB Server Version 10: Partial String Comparison
CVE-2026-115646Nov 10, 2026Hitachi
Partial String Comparison Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-50-06 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-50-/F through 09-66/V; Hi
9.4 Critical severity
JP1/Integrated Management 3 - Manager: Out-of-bounds Write
CVE-2026-86577Oct 27, 2026Hitachi
Out-of-bounds Write Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent:
9.4 Critical severity
JP1/Integrated Management 3 - Manager: Heap-based Buffer Overflow
CVE-2026-86576Oct 27, 2026Hitachi
Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 -
9.4 Critical severity
JP1/Integrated Management 3 - Manager: Stack-based Buffer Overflow
CVE-2026-86575Oct 27, 2026Hitachi
Stack-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3
9.4 Critical severity
HiRDB Server Version 10: Stack-based Buffer Overflow
CVE-2026-82122Oct 27, 2026Hitachi
Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB
7.5 High severity
HiRDB Server Version 10: Origin Validation Error
CVE-2026-82121Oct 27, 2026Hitachi
Origin Validation Error Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Serv
9.8 Critical severity
HiRDB Server Version 10: Heap-based Buffer Overflow
CVE-2026-82120Oct 27, 2026Hitachi
Heap-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB S
9.8 Critical severity
HiRDB Server Version 10: Improper Neutralization of Special Elements used in an OS Command
CVE-2026-82119Oct 27, 2026HitachiEPSS 1.05%
OS Command Injection Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server
9.8 Critical severity
HiRDB Server Version 10: Stack-based Buffer Overflow
CVE-2026-82118Oct 27, 2026Hitachi
Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB
9.8 Critical severity
HiRDB Server Version 10: Authentication Bypass by Spoofing
CVE-2026-82117Oct 27, 2026Hitachi
Authentication Bypass by Spoofing Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V;
9.8 Critical severity
HiRDB Server Version 10: Missing Authentication for Critical Functionality
CVE-2026-82116Oct 27, 2026Hitachi
Missing Authentication for Critical Function Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 throug
9.8 Critical severity
JP1/Automatic Job Management System 3 - Manager: Heap-based Buffer Overflow
CVE-2026-76939Oct 27, 2026Hitachi
Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.
9.8 Critical severity
JP1/Automatic Job Management System 3 - Manager: Authentication Bypass by Spoofing
CVE-2026-76938Oct 27, 2026Hitachi
Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
9.4 Critical severity
JP1/Automatic Job Management System 3 - Manager: Heap-based Buffer Overflow
CVE-2026-76937Oct 27, 2026Hitachi
Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
9.4 Critical severity
JP1/Automatic Job Management System 3 - Manager: Stack-based Buffer Overflow
CVE-2026-76936Oct 27, 2026Hitachi
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
9.4 Critical severity
JP1/Automatic Job Management System 3 - Manager: Stack-based Buffer Overflow
CVE-2026-76935Oct 27, 2026Hitachi
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
9.8 Critical severity
JP1/Automatic Job Management System 3 - Manager: Stack-based Buffer Overflow
CVE-2026-76934Oct 27, 2026Hitachi
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.
9.4 Critical severity
JP1/Automatic Job Management System 3 - Manager: Heap-based Buffer Overflow
CVE-2026-76933Oct 27, 2026Hitachi
Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.
9.4 Critical severity
JP1/Automatic Job Management System 3 - Manager: Stack-based Buffer Overflow
CVE-2026-76932Oct 27, 2026Hitachi
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.
7.9 High severity
Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk…
CVE-2026-82715Oct 14, 2026Hitachi
Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server. This issue affects Hitachi Disk Array Driver for AIX: from 01-00 before 01-23-/A; Hitachi Disk Array Driver for Virtual I/O Server:
9.8 Critical severity
Cosminexus Component Container: Improper Neutralization of Argument Delimiters in a Command
CVE-2026-71377Sep 8, 2026Hitachi
Command Argument Injection Vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 throu
9.8 Critical severity
Cosminexus Component Container: Improper Neutralization of Special Elements used in an OS Command
CVE-2026-71376Sep 8, 2026HitachiEPSS 1.77%
OS command injection vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-
7.4 High severity
Cosminexus Component Container: Improper Restriction of XML External Entity Reference
CVE-2026-71375Sep 8, 2026Hitachi
Improper restriction of XML external entity reference vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through
9.8 Critical severity
Cosminexus Component Container: Deserialization of Untrusted Data
CVE-2026-71374Sep 8, 2026Hitachi
Deserialization of untrusted data vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-3
8.3 High severity
Hitachi Virtual Storage Platform E390, E590…: Missing Authorization
CVE-2025-2902Jun 29, 2026Hitachi
Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform. This issue affects Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H: before DKCMAIN Ver. 93-07-26-xx/00, GUM Ver. 93-07-