{"id":"CVE-2026-91763","aliases":[],"cve":{"records":[{"id":"CVE-2026-91763","source":"Hitachi","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-15T00:22:27.972Z","published":"2026-11-10T04:44:41.956Z","modified":"2026-11-10T19:23:32.496Z"}],"publishers":[{"name":"Hitachi","role":"CNA","organizationId":"50d0f415-c707-4733-9afc-8f6c0e9b3f82","modified":"2026-11-10T04:44:41.956Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-10T19:23:32.496Z"}],"references":[{"url":"https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-166/index.html","tags":["vendor-advisory"],"source":"Hitachi"}],"weaknesses":[{"id":"CWE-61","description":"CWE-61 UNIX symbolic link (symlink) following","source":"Hitachi"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-10T19:23:12.141414Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for Linux","titleSource":"Hitachi","descriptionSource":"Hitachi","description":"UNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux.\nThis issue affects Hitachi Dynamic Link Manager for Linux: from 8.6.2.-00 before 9.0.5-00.","score":8.2,"severity":"high","published":"2026-11-10T04:44:41.956Z","modified":"2026-11-10T19:23:32.496Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Hitachi","name":"Hitachi Dynamic Link Manager for Linux","platforms":["Linux"],"versions":[{"version":"8.6.2.-00","status":"affected","lessThan":"9.0.5-00","versionType":"custom","changes":[{"at":"9.0.5-00","status":"unaffected"}]}],"defaultStatus":"unaffected","cpes":[],"source":"Hitachi","url":"https://www.cve.org/CVERecord?id=CVE-2026-91763"}],"remediation":[],"references":["https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-166/index.html"],"sources":[{"name":"CVE","id":"CVE-2026-91763","modified":"2026-11-10T19:23:32.496Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-91763"}],"assessments":[{"source":"Hitachi","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","score":8.2}],"sourceAffected":[],"observedAt":"2026-11-10T21:41:53.141Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T02:05:34.570Z"},"coverage":[{"source":"NVD","status":"no-result","checkedAt":"2026-11-10T05:00:59.899Z","attemptedAt":"2026-11-10T05:00:59.899Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-11-10T05:00:39.400Z","attemptedAt":"2026-11-10T05:00:39.400Z"},{"source":"EUVD","status":"no-result","checkedAt":"2026-11-10T05:00:40.606Z","attemptedAt":"2026-11-10T05:00:40.606Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-10T05:00:39.911Z","attemptedAt":"2026-11-10T05:00:39.911Z"}],"evidence":[],"aiSummary":{"text":"Hitachi Dynamic Link Manager for Linux versions 8.6.2.-00 before 9.0.5-00 have a UNIX symbolic link following vulnerability. An attacker with access may exploit this weakness. The impact is unspecified.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-10T04:56:10.059Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-91763"}]}}