CVE-2026-82827 Hardcoded credentials in Hitachi Coding Software Suite
Attackers can generate fraudulent Bearer tokens using a hard-coded JWT secret to abuse administrative functions in Hitachi Coding Software Suite.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-82827?
CVE-2026-82827 is a critical vulnerability in Hitachi Coding Software Suite, published on 1 Oct 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of JWT signing secret key allows an attacker to generate unauthorized Bearer tokens and exploit administrative functions.
This issue affects Hitachi Coding Software Suite: through 3.3.0.
Weakness: CWE-321
Which versions are affected by CVE-2026-82827?
How do I fix CVE-2026-82827?
No fix has been published for CVE-2026-82827 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-82827 being exploited?
There is no known exploitation of CVE-2026-82827 in the wild and no public exploit code.
Sources
Also known as GHSA-xxq6-25c8-35j6.