CVE-2025-9661CWE-78command-injection

CVE-2025-9661

High · published May 7, 2026

CVSS v3.1
8.1
EPSS
1%
Percentile
59.3
In the wild
Unconfirmed
What it is

OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23, 24, 26 and 28.

This issue affects Hitachi Virtual Storage Platform One Block 23/24/26/28: before DKCMAIN A3-04-21-40/00, ESM A3-04-21/00.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00900 · 59.3th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-05-07T12:16Z
Affected products (4)
ProductVersionsFixed in
hitachi/virtual_storage_one_blockall versions—
hitachi/virtual_storage_one_blockall versions—
hitachi/virtual_storage_one_blockall versions—
hitachi/virtual_storage_one_blockall versions—
References (1)
https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_309.html · [email protected]
EPSS history
Timeline
  • 07 MAY 07:08Z
    OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23/24/26/28
    cvelistv5