Loading story…
Hitachi published security advisories for multiple Linux-based enterprise management products, including Hitachi Ops Center Administrator, Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer, Hitachi Ops Center Analyzer viewpoint, and Hitachi Ops Center Viewpoint. The advisories cover several vulnerabilities across the product line, including an open redirect flaw in Ops Center Administrator tracked as CVE-2026-1166 and another vulnerability affecting Infrastructure Analytics Advisor and Ops Center Analyzer tracked as CVE-2026-2072.
The Canadian Centre for Cyber Security alerted organizations to the disclosures and urged administrators to review Hitachi’s guidance, apply recommended mitigations, and install the necessary updates. The newer Hitachi advisory expands the affected scope to additional Analyzer and Viewpoint components, indicating that enterprises using Hitachi monitoring and management platforms should assess exposure across related products and prioritize patching.
See real exploitation activity before you spend the cycle.
4 events from the most recent confirmed update back to the earliest known activity.
On 2026-04-07, Hitachi published additional security advisories for multiple vulnerabilities affecting Hitachi Ops Center Common Services, Hitachi Ops Center Viewpoint, Hitachi Ops Center Viewpoint data center proxy, JP1/IT Desktop Management, JP1/IT Desktop Management 2, JP1/NETM/DM, and Job Management Partner 1-branded equivalents. The advisories identified affected version ranges and prompted the Canadian Centre for Cyber Security to urge users to review mitigations and apply updates.
On 2026-04-07, Hitachi published a security advisory for multiple vulnerabilities affecting Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer, Hitachi Ops Center Analyzer viewpoint, and Hitachi Ops Center Viewpoint. This appears to extend or further document the vulnerability information for additional affected products beyond the initial March disclosure.
On 2026-03-25, the Canadian Centre for Cyber Security published alert AV26-279 highlighting Hitachi's advisories and urging users and administrators to review the guidance, follow mitigations, and apply necessary updates. The alert amplified the vendor disclosure for affected enterprise management products.
On 2026-03-25, Hitachi published security advisories for vulnerabilities affecting several Linux-based enterprise management products, including Hitachi Ops Center Administrator, Hitachi Infrastructure Analytics Advisor, and Hitachi Ops Center Analyzer. The advisories identified CVE-2026-1166 as an open redirect vulnerability in Ops Center Administrator and CVE-2026-2072 as affecting Infrastructure Analytics Advisor and Ops Center Analyzer.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
3 references tracked. Mallory keeps watching after this page renders.
cyber.gc.ca
Open sourcehitachi.com
Open sourcecyber.gc.ca
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The Canadian Centre for Cyber Security issued advisory **AV26-993** on October 2, 2026, warning of vulnerabilities affecting **Hitachi Coding Software Suite (HCSS)** identified as of October 1. The control-systems advisory directs users and administrators to Hitachi security information **hitachi-sec-2026-001** and the vendor’s vulnerability information page. A related Hitachi public-statement PDF is also linked in the reporting. The available advisory summaries do not specify vulnerability identifiers, affected versions, technical details, or severity ratings, and provide no information about exploitation. Organizations using HCSS should identify deployed instances and review Hitachi’s guidance to establish applicability and remediation requirements. The Cyber Centre recommends applying necessary updates as they become available; the notice should not be interpreted as confirmation that patches are already available for every affected deployment.
Oct 3, 2026
Hitachi published security advisories for **Hitachi Disk Array Systems** covering two vulnerabilities tracked as `CVE-2025-1978` and `CVE-2025-2902`. The notices were issued through Hitachi's Storage Solutions security advisory channel and identify the affected product family as enterprise disk array systems. The advisories provide vulnerability notifications for storage administrators and security teams monitoring Hitachi infrastructure. While the referenced notices do not include public synopsis details, the disclosures indicate that organizations using Hitachi Disk Array Systems should review the vendor guidance for affected models, exposure, and any recommended remediation or mitigation steps tied to `CVE-2025-1978` and `CVE-2025-2902`.
Jun 29, 2026
Vendors including Hitachi Energy, Schneider Electric, ABB, Ubiquiti, Dell, IBM, Red Hat, Ubuntu, and Microsoft released security advisories between October 27 and November 3, 2025, addressing vulnerabilities across a wide range of enterprise, industrial, and cloud products. Notable advisories include CISA's ICS alerts for control systems, a critical flaw in ABB's PCM600 software (CVE-2018-1002208), a critical vulnerability in Ubiquiti's UniFi Access Application (CVE-2025-52665), and updates for Microsoft Edge, Red Hat Enterprise Linux, Ubuntu LTS versions, and multiple Dell and IBM products. Organizations are urged to review the advisories, apply recommended mitigations, and update affected systems to reduce exposure to exploitation. The advisories highlight vulnerabilities that could allow remote code execution, privilege escalation, or unauthorized access if left unpatched. The Canadian Centre for Cyber Security and CISA emphasize the importance of timely patching and mitigation, especially for products deployed in critical infrastructure and enterprise environments. Administrators should consult the official vendor advisories for detailed remediation steps and monitor for further updates as new vulnerabilities are disclosed and addressed.
Jun 29, 2026