Hitachi Vantara Remot Ops Agent vulnerabilities

2 CVEs affecting Hitachi Vantara Remot Ops Agent, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-108337, published 2026-10-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-108337, published 2026-10-14. High severity, CVSS 7.4. EPSS: 0.3% chance of exploitation in the next 30 days. An administrator could retrieve the password reset code for any user and take over the account. The password reset codes were included in the output of an API and could be used to reset the…
CVE-2026-108336, published 2026-10-14. Critical severity, CVSS 9.1. EPSS: 0.2% chance of exploitation in the next 30 days. When the default self-signed certificate is used, an attacker could gain administrative access to the application. The SSL certificate for the web interface is used to sign JWT access tokens that…