Is CVE-2026-86578 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-86578 being exploited in the wild.

How severe is CVE-2026-86578?

High severity, with a CVSS score of 7.3, published 10 November 2026.

Which products and versions are affected?

Hitachi Dynamic Link Manager for Windows 5.0.0-03 to 9.0.4-00.

Is there a fix for CVE-2026-86578?

Yes: fixed in 9.0.4-01. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-86578 attacked?

It is attacked with local access, in a network appliance.

Am I affected by CVE-2026-86578?

Check whether you run Hitachi Dynamic Link Manager for Windows at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-86578: Hitachi Dynamic Link Manager for Windows link following vulnerability

CVE-2026-86578 · Severity: high · CVSS 7.3 · Published 2026-11-10

Hitachi Dynamic Link Manager for Windows, software used to manage storage systems, contains a link following vulnerability that allows attackers with high privilege to escalate impacts across the system. An attacker with administrative access could exploit this to gain unauthorized access to sensitive system functions and disrupt operations.

Vendors: Hitachi.

Quick answers

Is CVE-2026-86578 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-86578 being exploited in the wild.
How severe is CVE-2026-86578?: High severity, with a CVSS score of 7.3, published 10 November 2026.
Which products and versions are affected?: Hitachi Dynamic Link Manager for Windows 5.0.0-03 to 9.0.4-00.
Is there a fix for CVE-2026-86578?: Yes: fixed in 9.0.4-01. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-86578 attacked?: It is attacked with local access, in a network appliance.
Am I affected by CVE-2026-86578?: Check whether you run Hitachi Dynamic Link Manager for Windows at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: 9.0.4-01

Technical details

A link following vulnerability (CWE-59) in Hitachi Dynamic Link Manager for Windows allows privilege escalation with high privileges and no user interaction required. The attack vector is local; affected versions range from 5.0.0-03 to 9.0.4-00. This can result in confidentiality, integrity, and availability impacts across security scopes.

Affected products

Hitachi Dynamic Link Manager for Windows 5.0.0-03 to 9.0.4-00

Timeline

2026-11-10: disclosed

References

https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-160/index.html

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.