Hitachi Vantara
Hitachi Vantara Security Releases - October 2026
hitachi-vantara-2026-10 Oct 1, 2026 Source: Vendor
Hitachi Vantara security advisories for October 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-108335
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
3 lines
Showing 1–3 of 3 matching , clear filters
CVE-2026-108335
BR2026-0000-031329
Remote Ops Agent
unclaimed
When the password reset functionality is enabled, and email is configured, an attacker could take over any account using a brute-force attack.
There is no rate limiting on the attempts to enter ...
Credited as Internal
CVE-2026-108336
BR2026-0000-031333
Remot Ops Agent
unclaimed
When the default self-signed certificate is used, an attacker could gain administrative access to the application.
The SSL certificate for the web interface is used to sign JWT access tokens tha...
Credited as Internal
CVE-2026-108337
BR2026-0000-031334
Remot Ops Agent
unclaimed
An administrator could retrieve the password reset code for any user and take over the account.
The password reset codes were included in the output of an API and could be used to reset the pass...
Credited as Internal