{"api_version":"1","generated_at":"2026-11-12T14:45:47+00:00","cve":"CVE-2026-92864","urls":{"html":"https://cve.report/CVE-2026-92864","api":"https://cve.report/api/cve/CVE-2026-92864.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-92864","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-92864"},"summary":{"title":"Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for AIX (for markets outside Japan) and Hitachi Dynamic Link Manager EX for AIX (for the Japanese market)","description":"Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for AIX (for markets outside Japan) and Hitachi Dynamic Link Manager EX for AIX (for the Japanese market).\n\nThis issue affects Hitachi Dynamic Link Manager for AIX: from 7.4.1-00 before 9.0.4-01; Hitachi Dynamic Link Manager EX for AIX: from 7.4.1-00 before 9.0.4-01.","state":"PUBLISHED","assigner":"Hitachi","published_at":"2026-11-10 05:18:16","updated_at":"2026-11-10 20:19:46"},"problem_types":["CWE-61","CWE-61 CWE-61 UNIX symbolic link (symlink) following"],"metrics":[{"version":"3.1","source":"hirt@hitachi.co.jp","type":"Secondary","score":"7.3","severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"7.3","severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","data":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.3,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}}],"references":[{"url":"https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-164/index.html","name":"https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-164/index.html","refsource":"hirt@hitachi.co.jp","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92864","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92864","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Hitachi","product":"Hitachi Dynamic Link Manager for AIX","version":"affected 7.4.1-00 9.0.4-01 custom","platforms":[]},{"source":"CNA","vendor":"Hitachi","product":"Hitachi Dynamic Link Manager EX for AIX","version":"affected 7.4.1-00 9.0.4-01 custom","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2026","cve_id":"92864","cve":"CVE-2026-92864","epss":"0.001280000","percentile":"0.024950000","score_date":"2026-11-10","updated_at":"2026-11-11 00:08:19"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-92864","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T19:24:03.563299Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-11-10T19:24:20.016Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"unaffected","product":"Hitachi Dynamic Link Manager for AIX","vendor":"Hitachi","versions":[{"changes":[{"at":"9.0.4-01","status":"unaffected"}],"lessThan":"9.0.4-01","status":"affected","version":"7.4.1-00","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Hitachi Dynamic Link Manager EX for AIX","vendor":"Hitachi","versions":[{"changes":[{"at":"9.0.4-01","status":"unaffected"}],"lessThan":"9.0.4-01","status":"affected","version":"7.4.1-00","versionType":"custom"}]}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for AIX (for markets outside Japan) and Hitachi Dynamic Link Manager EX for AIX (for the Japanese market).<p>This issue affects Hitachi Dynamic Link Manager for AIX: from 7.4.1-00 before 9.0.4-01; Hitachi Dynamic Link Manager EX for AIX: from 7.4.1-00 before 9.0.4-01.</p>"}],"value":"Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for AIX (for markets outside Japan) and Hitachi Dynamic Link Manager EX for AIX (for the Japanese market).\n\nThis issue affects Hitachi Dynamic Link Manager for AIX: from 7.4.1-00 before 9.0.4-01; Hitachi Dynamic Link Manager EX for AIX: from 7.4.1-00 before 9.0.4-01."}],"impacts":[{"capecId":"CAPEC-132","descriptions":[{"lang":"en","value":"CAPEC-132 Symlink Attack"}]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.3,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-61","description":"CWE-61 UNIX symbolic link (symlink) following","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-11-10T04:44:41.081Z","orgId":"50d0f415-c707-4733-9afc-8f6c0e9b3f82","shortName":"Hitachi"},"references":[{"tags":["vendor-advisory"],"url":"https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-164/index.html"}],"source":{"advisory":"hitachi-sec-2026-164","discovery":"UNKNOWN"},"title":"Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for AIX (for markets outside Japan) and Hitachi Dynamic Link Manager EX for AIX (for the Japanese market)","x_generator":{"engine":"Vulnogram 1.0.5"}}},"cveMetadata":{"assignerOrgId":"50d0f415-c707-4733-9afc-8f6c0e9b3f82","assignerShortName":"Hitachi","cveId":"CVE-2026-92864","datePublished":"2026-11-10T04:44:41.081Z","dateReserved":"2026-09-17T06:05:32.872Z","dateUpdated":"2026-11-10T19:24:20.016Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-11-10 05:18:16","lastModifiedDate":"2026-11-10 20:19:46","problem_types":["CWE-61","CWE-61 CWE-61 UNIX symbolic link (symlink) following"],"metrics":{"cvssMetricV31":[{"source":"hirt@hitachi.co.jp","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.3,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-11-10T19:24:03.563299Z","id":"CVE-2026-92864","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"92864","Ordinal":"1","Title":"Insecure Temporary File Vulnerability in Hitachi Dynamic Link Ma","CVE":"CVE-2026-92864","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"92864","Ordinal":"1","NoteData":"Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for AIX (for markets outside Japan) and Hitachi Dynamic Link Manager EX for AIX (for the Japanese market).\n\nThis issue affects Hitachi Dynamic Link Manager for AIX: from 7.4.1-00 before 9.0.4-01; Hitachi Dynamic Link Manager EX for AIX: from 7.4.1-00 before 9.0.4-01.","Type":"Description","Title":"Insecure Temporary File Vulnerability in Hitachi Dynamic Link Ma"}]}}}