Skip to content
OpenAdvisories
Medium · 5.2 Public exploit CVE-2025-5781 EUVD-2025-208107GHSA-3pm4-mcqw-jq89

Information Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration Manager

Published Feb 25, 2026 · Updated Feb 26, 2026 · Assigned by Hitachi

Vendor: Hitachi Product: Hitachi Configuration Manager Product: Hitachi Device Manager Product: Hitachi Ops Center API Configuration Manager

Description

Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitachi Device Manager allows Session Hijacking.This issue affects Hitachi Ops Center API Configuration Manager: from 10.0.0-00 before 11.0.5-00; Hitachi Configuration Manager: from 8.5.1-00 before 11.0.5-00; Hitachi Device Manager: from 8.4.1-00 before 8.6.5-00.

Affected products

VendorProductAffectedFixed
Hitachi Hitachi Ops Center API Configuration Manager 10.0.0-00 – < 11.0.5-00 11.0.5-00
Hitachi Hitachi Configuration Manager 8.5.1-00 – < 11.0.5-00 11.0.5-00
Hitachi Hitachi Device Manager 8.4.1-00 – < 8.6.5-00 8.6.5-00

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 2 repositories

  • iamrajkumar1995/cve-2025-5781_FreePBX ★ 0 · Aug 16, 2026

    In August 2025, a critical vulnerability was disclosed in the FreePBX Endpoint module. CVE-2025–57819 allows an unauthenticated attacker to exploit SQL injection in the Endpoint module and, through a…

  • jasonbernier/CVE-2025-5781 ★ 0 · Aug 11, 2026

    CVE-2025-5781 FreePBX Exploit POC

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 1

References