CVE-2026-91757: OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware
Published Nov 10, 2026
·Updated
OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware.
This issue affects Hitachi Dynamic Link Manager for VMware: from 7.3.0-00 before 9.0.4-01.
Event History
Nov 10, 2026
CVE Published
via MITRE·04:44 AM
Data Sourced
via MITRE·04:44 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:18 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require an authenticated account?
No. The CVSS vector indicates no privileges are required, but exploitation does require user interaction.
2
Who can realistically attempt exploitation?
An attacker needs adjacent-network access rather than ordinary remote network reachability. The attack complexity is rated high.
3
What is the potential impact if exploitation succeeds?
The vulnerability is rated high severity (7.1) and is assessed as having high impact on confidentiality, integrity, and availability.