Hitachi Virtual Storage Platform: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in Hitachi Virtual Storage Platform ausnutzen, um beliebigen Code auszuführen, die Authentifizierung zu umgehen oder andere, nicht näher spezifizierte Angriffe durchzuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2026-08945 linked CVEs
Open advisory with all CVEs
More on Platform
Other advisories
- Not ratedosv:CLEANSTART-2026-BB82430On most platforms, Go uses the given system root certificates
- Not ratedosv:CLEANSTART-2026-EG43679On Unix platforms, when listing the contents of a directory using File
- HighCVE-2026-46560OpenIdentityPlatform OpenAM: unzureichende Prüfung kryptografischer Signaturen
- HighCVE-2026-46560OpenIdentityPlatform OpenAM: unzureichende Prüfung kryptografischer Signaturen
- Not ratedosv:CLEANSTART-2024-HI39153On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits
- Not ratedosv:CLEANSTART-2026-CR48541On Unix platforms, when listing the contents of a directory using File
- Not ratedosv:CLEANSTART-2026-NG71838Parsing a WEBP image with an invalid, large size panics on 32-bit platforms
- HighCVE-2026-48526Red Hat Ansible Automation Platform: Mehrere Schwachstellen
Other news entries
- Choosing a WAAP in 2026: 3 questions that separate the shortlistNewsCSO Online
- ServiceNow AI Platform: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion FrozenNewsThe Hacker News
- Chainalysis says an attacker using agentic techniques accessed its systems; customer user names, emails and roles exposedBreachpwn.watch
- Northflank security incident: PaaS tells users to assume all environment variables were decryptedBreachpwn.watch
- Polymarket halts trading after crypto-draining script breach, $2.5M tracedNewsBleepingComputer
- Google Cloud Platform: Schwachstelle ermöglicht CodeausführungVulnerabilityBSI CERT-Bund
- SolarWinds Platform: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0894
ID