7.4

CVE-2026-108337: hitachi vantara remot ops agent

CVSS: 7.4v4.0HighDeferred
Published 14-10-2026Last modified 16-10-2026
Open JSON

Vulnerability summary

CVE-2026-108337 is a high (CVSS 7.4) vulnerability in hitachi vantara remot ops agent. EPSS estimates a 0.28% chance of exploitation in the next 30 days, higher than 19.6% of scored vulnerabilities.

Overall risk
30/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.4/10
010
High · v4.0 (CVE.org)
EPSS score
0.28%
0%100%
Low · Change unavailable
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 14-10-2026
    PublishedVulnerability first disclosed.
  2. 16-10-2026
    Last modifiedVulnerability information updated.

Description

An administrator could retrieve the password reset code for any user and take over the account. The password reset codes were included in the output of an API and could be used to reset the password of any account. The API is limited to use by administrator accounts only. An attacker who already has administrative access to the application could compromise the credentials of other accounts on the application. Device credentials and customer data cannot be accessed with this vulnerability.

CVSS metrics

2 scores · 2 sources · 1 version

EPSS trend

Probability

0.28%

Chance of exploitation in the next 30 days

Percentile

20%

Versus all other CVEs

30-day change

Change unavailable

Change unavailable

15-10-202621-10-2026
EPSS score
0.28%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Hitachi vantara1 product

1 vendor · 1 product

References

1 links