Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-82827

A hard-coded JWT signing secret key may allow administrative functions to be abused using fraudulently generated Bearer tokens

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Hitachi

Description

Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of JWT signing secret key allows an attacker to generate unauthorized Bearer tokens and exploit administrative functions. This issue affects Hitachi Coding Software Suite: through 3.3.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hitachi Industrial Equipment Systems Hitachi Coding Software Suite

Default version status: unaffected

  • 0 to ≤ 3.3.0affected

References