Self-Signed Certificate Vulnerability in Hitachi Vantara Products

CVE-2026-108336

What is CVE-2026-108336?

A serious security flaw exists in Hitachi Vantara products when the default self-signed certificate is utilized. This vulnerability enables attackers to potentially bypass authentication mechanisms, granting them unauthorized administrative access to the application. By exploiting the self-signed certificate, an attacker can sign JSON Web Tokens (JWT) that are responsible for user session validation. Once authenticated, the attacker could manipulate critical configurations or collect sensitive logs, posing a significant risk to the integrity of the application and its ecosystem.

References