Read the docs
TI-2026-00894 Aliases CVE-2026-1166GHSA-hff5-rpfp-7hc7

Open Redirect Vulnerability in Hitachi Ops Center Administrator

Priority LOW 19CWE-601Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Spoofing
Confidentiality · integrity · availability
None · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-601.

Summary

Open Redirect vulnerability in Hitachi Ops Center Administrator.This issue affects Hitachi Ops Center Administrator: from 10.2.0 before 11.0.8.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00182 7th percentileScored 2026-11-07
Fix Fixed Hitachi Ops Center Administrator (Hitachi): 11.0.8

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
HitachiHitachi Ops Center Administrator10.2.0 to before 11.0.811.0.8Patch availableCNA
  • Hitachi Ops Center Administrator VendorHitachi Affected 10.2.0 to before 11.0.8 Fixed in 11.0.8 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:hitachi:ops_center_administrator:*:*:*:*:*:*:*:*10.2.0 to before 11.0.8VulnerableHitachi
  • cpe:2.3:a:hitachi:ops_center_administrator:*:*:*:*:*:*:*:* Versions 10.2.0 to before 11.0.8 Vulnerable ·Hitachi

Remediation

  • Fix · CNA Hitachi Ops Center Administrator (Hitachi) Fixed in 11.0.8

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-1166
  2. 2026-10-03 Alias added: GHSA-hff5-rpfp-7hc7

References

Advisory 1

  • TI-2023-03120 Information Exposure Vulnerability in Hitachi Ops Center Administrator CVSS 3.1MEDIUM 6.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences