CVE-2025-11159Critical· 9.1▾ MidnightHitachi Vantara Pentaho Data Integration & Analytics of all versions contain a JDBC driver for H2 databases which is vulnerable to external script execution when a new connection is created by a data source administrator.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 50.1 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 30.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.3%
Last analysed / modified upstream
Hitachi Vantara Pentaho Data Integration & Analytics of all versions contain a JDBC driver for H2 databases which is vulnerable to external script execution when a new connection is created by a data source administrator.
vantara_pentaho_data_integration_and_analytics < 10.2.0.7Upgrade past the affected range:
vantara_pentaho_data_integration_and_analytics 10.2.0.7Connected by shared product, vendor, weakness, or advisory.
CVE-2026-82122Critical· 9.4Stack-based Buffer Overflow Vulnerability in HiRDB
CVE-2026-82121High· 7.5Origin Validation Error Vulnerability in HiRDB
CVE-2026-86577Critical· 9.4Out-of-bounds Write Vulnerability in JP1 Products
CVE-2026-82117Critical· 9.8Authentication Bypass by Spoofing Vulnerability in HiRDB
CVE-2026-82120Critical· 9.8Heap-based Buffer Overflow Vulnerability in HiRDB
CVE-2026-82116Critical· 9.8Missing Authentication for Critical Function Vulnerability in HiRDB