CVE-2026-86573: CWE-787 Out-of-bounds write in Hitachi Hitachi Disk Array Driver for AIX
Description
CVE-2026-86573 is an out-of-bounds write vulnerability in the Hitachi Disk Array Driver for AIX and the Hitachi Disk Array Driver for Virtual I/O Server. It affects versions 01-00 of the AIX driver and 01-04 of the Virtual I/O Server driver before version 01-23-/A. The vulnerability has a CVSS 3.1 base score of 5.1, indicating medium severity. It requires local attack vector with high privileges and no user interaction. The impact includes integrity loss and high availability impact but no confidentiality loss. No known exploits are reported in the wild. Patch status is not confirmed as no patch or vendor advisory is provided.
CVSS v3.1
Score 5.1medium
Affected software
Hitachi
Hitachi Disk Array Driver for AIX
Hitachi
Hitachi Disk Array Driver for Virtual I/O Server
pkg:rpm/aix/hitachi-disk-array-driver-virtual-io-serverRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CVE-2026-86573) involves an out-of-bounds write (CWE-787) in Hitachi Disk Array Driver for AIX and Virtual I/O Server. Affected versions include 01-00 for AIX and 01-04 for Virtual I/O Server, with the issue present before version 01-23-/A. The CVSS 3.1 vector indicates local attack with low complexity, requiring high privileges, no user interaction, and results in integrity and availability impacts. The vulnerability could allow an attacker with high privileges to write outside the intended memory bounds, potentially causing system instability or denial of service. No vendor advisory or patch information is currently available.
Potential Impact
The vulnerability can lead to integrity loss and high impact on availability of the affected systems. It does not impact confidentiality. Exploitation requires local access with high privileges. No known active exploits have been reported.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict local access to trusted users with high privileges to reduce risk.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Hitachi
- Date Reserved
- 2026-09-08T05:39:06.584Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6acee30e2cdf04f6562b19ed
Added to database: 10/14/2026, 02:03:58 UTC
Last enriched: 10/14/2026, 02:18:52 UTC
Last updated: 10/14/2026, 02:19:11 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.