CVE-2026-82715

7.9High

Published 14 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash

7.9High

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: Required
Impact: High impact on integrity, availability
Weakness: CWE-377

Impact

Local attackers can alter system files or cause a denial of service, requiring local account access and user interaction to trigger the flaw.

Root cause

The driver insecurely creates and handles temporary files.

Affected systems

Hitachi Disk Array Driver for AIX: 01-00 before 01-23-/A; Hitachi Disk Array Driver for Virtual I/O Server: 01-04 before 01-23-/A

CVSS v3.1 · CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H

Fix & remediation

Upgrade Hitachi Disk Array Driver for AIX and Virtual I/O Server to version 01-23-/A or later. No workaround or interim mitigation is provided in the advisory.

shell

$ lslpp -l | grep -i hitachi

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server. This issue affects Hitachi Disk Array Driver for AIX: from 01-00 before 01-23-/A; Hitachi Disk Array Driver for Virtual I/O Server: from 01-04 before 01-23-/A.

References

https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-137/index.html

Source: nvd.nist.gov/vuln/detail/CVE-2026-82715