OS Command Injection in Hitachi Dynamic Link Manager for VMware
CVE-2026-91757

7.1HIGH

Key Information:

Vendor

Hitachi
Status
Hitachi Dynamic Link Manager For Vmware
Vendor
CVE Published:
10 November 2026

What is CVE-2026-91757?

An OS Command Injection vulnerability has been identified in Hitachi Dynamic Link Manager for VMware, which could allow an attacker to execute arbitrary commands on the host system. This oversight affects versions ranging from 7.3.0-00 up to, but not including, 9.0.4-01. It is crucial for users of this software to review their system configurations and apply any available security patches to mitigate potential exploitation.

Affected Version(s)

Hitachi Dynamic Link Manager for VMware 7.3.0-00 < 9.0.4-01

References

https://www.hitachi.com/products/it/software/security/inf...
vendor-advisory

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.