🔓 CVEs & KEV
The latest CVE roundup includes critical vulnerabilities in Hitachi Industrial Equipment Systems and Genians products, plus a notable Docker flaw.
• CVE-2026-82824 — Hitachi Coding Software Suite — CVSS 9.3 — Path traversal may allow arbitrary files to be viewed, created, modified, or deleted.
• CVE-2026-82825 — Hitachi Coding Software Suite — CVSS 9.3 — Missing proper authentication for critical APIs may allow sensitive information disclosure.
• CVE-2026-82827 — Hitachi Coding Software Suite — CVSS 9.3 — Hard-coded JWT signing secret key may allow administrative functions to be bypassed.
• CVE-2026-82829 — Hitachi Coding Software Suite — CVSS 9.3 — Hidden accounts or hard-coded credentials may permit unauthorized access with elevated privileges.
• CVE-2026-76142 — Genians Genian NAC 5.0.75 LTS — CVSS 9.3 — Improper access control on internal interface.
• CVE-2026-82826 — Hitachi Coding Software Suite — CVSS 8.7 — Authentication information or sensitive data may be intercepted in transit.
• CVE-2026-82828 — Hitachi Coding Software Suite — CVSS 8.7 — Improper authorization may allow general users to perform privileged operations.
• CVE-2026-76146 — Genians Genian SSL PNS (xenics_auther) — CVSS 8.4 — OS command injection vulnerability.
• CVE-2026-76145 — Genians Genian SSL PNS (frodo-core) — CVSS 7.5 — Improper privilege management.
• CVE-2026-76143 — Genians Genian SSL PNS (frodo-core) — CVSS 7.3 — Multi-factor authentication bypass due to missing authorization checks.
• CVE-2026-17106 — moby go-archive (CopyEscape Docker Flaw) — CVSS 7.1 — Allows malicious containers to overwrite host files and gain root access.