CVE-2026-86607: CWE-209 Generation of error message containing sensitive information in Hitachi Hitachi Ops Center Administrator
Description
CVE-2026-86607 is an internal application information exposure vulnerability in Hitachi Ops Center Administrator. It affects versions before 11.0.9-01. The vulnerability involves generation of error messages that contain sensitive information. The CVSS 3.1 base score is 4.3, indicating medium severity. No known exploits are reported in the wild. The vulnerability does not impact confidentiality beyond limited information exposure and does not affect integrity or availability.
CVSS v3.1
Score 4.3medium
Affected software
Hitachi
Hitachi Ops Center Administrator
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability, identified as CWE-209, occurs in Hitachi Ops Center Administrator versions prior to 11.0.9-01. It involves the generation of error messages that inadvertently expose sensitive internal application information. The CVSS 3.1 vector indicates the vulnerability is remotely exploitable over the network with low attack complexity and requires low privileges but no user interaction. The impact is limited to partial confidentiality loss without integrity or availability impact.
Potential Impact
The vulnerability allows an attacker with low privileges to obtain sensitive internal application information through error messages. This information exposure could aid in further attacks but does not directly compromise system integrity or availability. The overall impact is limited to confidentiality with a medium severity rating (CVSS 4.3).
Mitigation Recommendations
A fix is available in Hitachi Ops Center Administrator version 11.0.9-01 and later. Users should upgrade to version 11.0.9-01 or above to remediate this vulnerability. No additional mitigations are specified.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Hitachi
- Date Reserved
- 2026-09-08T08:46:10.479Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6acee30e2cdf04f6562b19ee
Added to database: 10/14/2026, 02:03:58 UTC
Last enriched: 10/14/2026, 02:18:48 UTC
Last updated: 10/14/2026, 02:19:11 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.