Incorrect authorization in Hitachi Coding Software Suite
Priority LOW 39CWE-863Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-863.
Summary
Hitachi Coding Software Suite contains an Incorrect Authorization vulnerability that allows an unprivileged user to perform administrator-level operations. This issue affects Hitachi Coding Software Suite: through 3.3.0.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00232 14th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Hitachi Industrial Equipment Systems | Hitachi Coding Software Suite | up to 3.3.0 | — | No fix listed | CNA |
- Hitachi Coding Software Suite VendorHitachi Industrial Equipment Systems Affected up to 3.3.0 Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
Hitachi Coding Software Suite — hitachi-ies.com/common/documents/vulnerability/hcss/Hitachi…
6 records Highest priority Priority MEDIUM 5 MEDIUM, 1 LOW
Other records, highest priority first
- TI-2026-57139 Hidden accounts or hard-coded credentials may permit unauthorized access without the legitimate authentication processPriority MEDIUM 48
- TI-2026-57137 A hard-coded JWT signing secret key may allow administrative functions to be abused using…Priority MEDIUM 48
- TI-2026-57135 Missing authentication in Hitachi Coding Software SuitePriority MEDIUM 48
Timeline
- 2026-10-02 Threatist record created from CVE-2026-82828
- 2026-10-03 Alias added: GHSA-jjvq-rhwj-p63j
References
More Hitachi Industrial Equipment Systems vulnerabilities
- TI-2026-57139 Hidden accounts or hard-coded credentials may permit unauthorized access without the legitimate authentication process CVSS 4.0CRITICAL 9.3
- TI-2026-57137 A hard-coded JWT signing secret key may allow administrative functions to be abused using… CVSS 4.0CRITICAL 9.3
- TI-2026-57135 Missing authentication in Hitachi Coding Software Suite CVSS 4.0CRITICAL 9.3
- TI-2026-57134 Path traversal may allow arbitrary files to be viewed, created, modified, or deleted CVSS 4.0CRITICAL 9.3
- TI-2026-57136 Authentication information or sensitive data may be intercepted in transit CVSS 4.0HIGH 8.7
Sources
- CVE-2026-82828 · CVE Program
- CVE-2026-82828 · NVD
- FIRST EPSS
- GHSA-jjvq-rhwj-p63j · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences