CVE-2026-82827 — A hard-coded JWT signing secret key may allow administrative functions to be abused using fraudulently generated Bearer tokens
Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of JWT signing secret key allows an attacker to generate un…
Published: 2026-10-01 · CVSS: 9.3 · CVSS 4.0
Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of JWT signing secret key allows an attacker to generate unauthorized Bearer tokens and exploit administrative functions. This issue affects Hitachi Coding Software Suite: through 3.3.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7