CVE-2026-82827 — A hard-coded JWT signing secret key may allow administrative functions to be abused using fraudulently generated Bear…

CVE-2026-82827

A hard-coded JWT signing secret key may allow administrative functions to be abused using fraudulently generated Bearer tokens PUBLISHED

Description (CNA)

Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of JWT signing secret key allows an attacker to generate unauthorized Bearer tokens and exploit administrative functions. This issue affects Hitachi Coding Software Suite: through 3.3.0.

Affected (CNA)

Vendor / product	Versions
Hitachi Industrial Equipment Systems / Hitachi Coding Software Suite	affected 0 through 3.3.0

CWE

CWE-321

References

https://www.hitachi-ies.com/common/documents/vulnerability/hcss/Hitachi_Coding_Software_Suite_Public_statement_20260925_EN.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.