‹ Back to list

CVE-2026-82715

Status: DeferredHigh (7.9)—
Severity7.9High · CVSS 3.1
Exploitation probability0.12 %higher than 2% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitNot knownno public code found

Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server.

This issue affects Hitachi Disk Array Driver for AIX: from 01-00 before 01-23-/A; Hitachi Disk Array Driver for Virtual I/O Server: from 01-04 before 01-23-/A.

CVSS

Base score
7.9
Version
3.1
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days
0.12 %
Percentile among all scored CVEs
2
Score date
10/20/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

ATT&CK techniques

How this vulnerability is exploited and what the attacker gains, in MITRE ATT&CK terms.

El vector UI:R con AV:L exige interacción del usuario (T1203). CWE-377 e I:H/A:H sugieren manipulación de datos, aunque el texto no detalla el efecto concreto.

Inferred by our analysis agent from the official description, CVSS vector and CWE, and checked by a supervisor. May contain errors.

ATT&CK mitigations that cover these techniques

Restrict File and Directory PermissionsRemote Data StorageNetwork SegmentationEncrypt Sensitive InformationApplication Isolation and SandboxingExploit Protection

Affected technologies (2)

⚠ AI-inferred from the description — NVD hasn't analyzed this CVE yet, these aren't verified CPEs.

Hitachi — Disk Array Driver FOR AIXAIHitachi — Disk Array Driver FOR Virtual I/O ServerAI

CWEs

References

Show 1 references

Raw JSON (NVD)

Show
{
  "id": "CVE-2026-82715",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-82715",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-10-18T13:29:06.338721Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "hirt@hitachi.co.jp",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 7.9,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 5.8,
        "exploitabilityScore": 1.5
      }
    ]
  },
  "affected": [
    {
      "source": "hirt@hitachi.co.jp",
      "affectedData": [
        {
          "vendor": "Hitachi",
          "product": "Hitachi Disk Array Driver for AIX",
          "versions": [
            {
              "status": "affected",
              "changes": [
                {
                  "at": "01-23-/A",
                  "status": "unaffected"
                }
              ],
              "version": "01-00",
              "lessThan": "01-23-/A",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Hitachi",
          "product": "Hitachi Disk Array Driver for Virtual I/O Server",
          "versions": [
            {
              "status": "affected",
              "changes": [
                {
                  "at": "01-23-/A",
                  "status": "unaffected"
                }
              ],
              "version": "01-04",
              "lessThan": "01-23-/A",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2026-10-14T02:17:00.863",
  "references": [
    {
      "url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-137/index.html",
      "source": "hirt@hitachi.co.jp"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "hirt@hitachi.co.jp",
      "description": [
        {
          "lang": "en",
          "value": "CWE-377"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server.\n\nThis issue affects Hitachi Disk Array Driver for AIX: from 01-00 before 01-23-/A; Hitachi Disk Array Driver for Virtual I/O Server: from 01-04 before 01-23-/A."
    }
  ],
  "lastModified": "2026-10-18T14:16:56.663",
  "sourceIdentifier": "hirt@hitachi.co.jp"
}