Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-82827 EUVD-2026-90492GHSA-xxq6-25c8-35j6

A hard-coded JWT signing secret key may allow administrative functions to be abused using fraudulently generated Bearer tokens

Published Oct 1, 2026 · Updated Oct 1, 2026 · Assigned by Hitachi

Description

Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of JWT signing secret key allows an attacker to generate unauthorized Bearer tokens and exploit administrative functions.

This issue affects Hitachi Coding Software Suite: through 3.3.0.

Affected products

VendorProductAffectedFixed
Hitachi Industrial Equipment Systems Hitachi Coding Software Suite ≤ 3.3.0 —

References