HiRDB Partial String Comparison Vulnerability (CVE-2026-115646)

How Does CVE-2026-115646 Affect HiRDB?

Hitachi classifies the issue as a partial string comparison vulnerability. The NVD record maps the weakness to CWE-187, which covers comparisons that examine only part of a string.

The public advisory does not describe the affected operation or provide an attack sequence. Its CVSS vector shows that an unauthenticated network attacker may reach the flaw without user interaction.

The same vector assigns high impact to confidentiality, integrity, and availability. Administrators should treat reachable affected systems as a priority within their vulnerability management process.

Current exploitation signals

Brandefense Blackhole recorded three dark-chat posts mentioning CVE-2026-115646 between August 12 and November 10, 2026. This chatter is a risk signal, but it does not establish successful exploitation.

CISA's November 9, 2026 catalog does not list the CVE as a Known Exploited Vulnerability. The exploitation status therefore remains unknown, and teams should not interpret either fact as proof that systems are safe.

Which HiRDB Versions Are Affected by CVE-2026-115646?

Hitachi lists affected branches separately by product and platform. Teams should match the installed product name, platform, and complete maintenance level before scheduling a security patch.

HiRDB Server Version 10

AIX

• 10-12; 10-11 through 10-11-01; 10-10.
• 10-09 through 10-09-03; 10-08 through 10-08-04; 10-07 through 10-07-08.
• 10-06 through 10-06-09; 10-05 through 10-05-12; 10-04 through 10-04-14.
• 10-03 through 10-03-19; 10-02 through 10-02-17; 10-01 through 10-01-12; 10-00 through 10-00-11.

HP-UX

• 10-05 through 10-05-12; 10-04 through 10-04-14; 10-03 through 10-03-19.
• 10-02 through 10-02-16; 10-01 through 10-01-12; 10-00 through 10-00-11.

Linux

• 10-12; 10-11 through 10-11-01; 10-10 through 10-10-01.
• 10-09 through 10-09-05; 10-08 through 10-08-04; 10-07 through 10-07-09.
• 10-06 through 10-06-10; 10-05 through 10-05-12; 10-04 through 10-04-14.
• 10-03 through 10-03-20; 10-02 through 10-02-17; 10-01 through 10-01-12; 10-00 through 10-00-11.

Windows

• 10-12; 10-11 through 10-11-01; 10-10.
• 10-09 through 10-09-05; 10-08 through 10-08-04; 10-07 through 10-07-08.
• 10-06 through 10-06-09; 10-05 through 10-05-12; 10-04 through 10-04-14.
• 10-03 through 10-03-19; 10-02 through 10-02-17; 10-01 through 10-01-12; 10-00 through 10-00-11.

HiRDB Server Version 9

These ranges apply to AIX, HP-UX, Linux, and Windows. Hitachi lists 09-66 through 09-66-22 and 09-65 through 09-65-24.

The remaining ranges are 09-60 through 09-60-42 and 09-50-06 through 09-50-39. Each listed platform uses the same ranges.

HiRDB Server with Additional Function Version 9

These ranges apply to AIX, HP-UX, Linux, and Windows. Hitachi lists 09-66 through 09-66-/V and 09-65 through 09-65-/X.

The remaining ranges are 09-60 through 09-60-2P and 09-50-/F through 09-50-2M. Each listed platform uses the same ranges.

32-bit Version 9 products

On Windows, HiRDB Server Version 9(32) includes 09-66 through 09-66-22 and 09-65 through 09-65-24. It also includes 09-60 through 09-60-42 and 09-50-06 through 09-50-39.

On Windows, the Additional Function edition includes 09-66 through 09-66-/V and 09-65 through 09-65-/X. It also includes 09-60 through 09-60-2P and 09-50-/F through 09-50-2M.

Which Fixed HiRDB Versions Are Available?

Hitachi lists 10-12-01, 10-11-02, and 10-08-05 as fixed HiRDB Server Version 10 releases for AIX, Linux, and Windows. The advisory provides no fixed HP-UX or Version 9 release in its fixed-products table.

Hitachi directs customers to contact their support representative for fixed-product details. Teams should verify the appropriate supported destination before beginning the vulnerability remediation lifecycle.