CVE-2026-82117

Summary

A spoofing vulnerability in HiRDB Server allows unauthenticated attackers to bypass authentication by impersonating a legitimate client or service, granting full access to sensitive data and system functions.

Exploitability

Exploitation is straightforward for remote attackers due to lack of authentication requirements and network accessibility; no prior access or user interaction is needed.

Blast radius

Successful exploitation could lead to complete compromise of confidentiality, integrity, and availability of the affected database systems, potentially affecting all connected applications and users.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade HiRDB Server Version 10 to 10-12-01 or later; for Version 9, upgrade to 09-66-22 (or 09-66/V for the Additional Function variant); for 32-bit variants, upgrade to 09-66-22 (or 09-66-/V for the Additional Function variant).

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.