CVE-2025-7386: Information exposure vulnerability in Hitachi Storage Navigator

Severity: medium (CVSS 6.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-06-29 · updated 2026-09-29
Weakness: CWE-522

Description

Information exposure vulnerability in Hitachi Storage Navigator. This issue affects Hitachi Virtual Storage Platform 5100, 5200, 5500, 5600, 5100H, 5200H, 5500H, 5600H, VX8: before DKCMAIN Ver. 90-09-24-00/00, SVP Ver. 90-09-24/00, before DKCMAIN Ver. 90-08-86-00/00, SVP Ver. 90-08-86/00; Hitachi Virtual Storage Platform G1000, G1500, F1500, VX7: before DKCMAIN Ver. 80-06-96-00/00, SVP Ver. 80-06-91/00.

Affected products

Hitachi Virtual Storage Platform 5100, 5200, 5500, 5600, 5100H, 5200H, 5500H, 5600H, VX8: before DKCMAIN Ver. 90-09-24-00/00, SVP Ver. 90-09-24/00; before DKCMAIN Ver. 90-08-86-00/00, SVP Ver. 90-08-86/00 — fixed in SVP Ver. 90-08-86/00, SVP Ver. 90-09-24/00, DKCMAIN Ver. 90-08-86-00/00, DKCMAIN Ver. 90-09-24-00/00
Hitachi Virtual Storage Platform G1000, G1500, F1500, VX7: before DKCMAIN Ver. 80-06-96-00/00, SVP Ver. 80-06-91/00 — fixed in SVP Ver. 80-06-91/00, DKCMAIN Ver. 80-06-96-00/00

How to fix

Upgrade to a fixed version: Hitachi Virtual Storage Platform 5100, 5200, 5500, 5600, 5100H, 5200H, 5500H, 5600H, VX8 SVP Ver. 90-08-86/00, SVP Ver. 90-09-24/00, DKCMAIN Ver. 90-08-86-00/00, DKCMAIN Ver. 90-09-24-00/00; Hitachi Virtual Storage Platform G1000, G1500, F1500, VX7 SVP Ver. 80-06-91/00, DKCMAIN Ver. 80-06-96-00/00. Check the vendor advisory for mitigations.

References

https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/2026_301.html

Get alerted when CVE-2025-7386 or the next vulnerability affects your stack