Is CVE-2026-7310 actively exploited?

No active exploitation of CVE-2026-7310 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-7310 be exploited remotely?

No. CVE-2026-7310 requires local access to exploit.

What is the CVSS score of CVE-2026-7310?

CVE-2026-7310 has a CVSS score of 4.4 (MEDIUM).

HOME VULNERABILITIESCVE-2026-7310

MEDIUM

CVE-2026-7310

CWE-122Published: May 26, 2026· Updated: May 26, 2026

4.4

CVSS v3.1

Official Description

A heap-based buffer overflow vulnerability exists in XML

parser functionality in the HiDraw. An authenticated

malicious user with local access can exploit this

vulnerability using a specially crafted XML file which may

lead to memory corruption and potential arbitrary code

execution. Successful exploitation could result in

application crashes (denial of service) and compromise the

confidentiality and integrity of the affected system.

NVD Source

Technical Analysis

CVE-2026-7310 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityHigh

Privileges Req.Low

User InteractionA

ScopeX

Impact

Confidentiality

Integrity

Availability

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Exploit-DB

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

PacketStorm

Security advisories & exploits

External links open in a new tab. Always verify in a controlled environment before use.

News & Research Mentioning CVE-2026-7310

Hitachi Energy MACH HiDraw

CISA Alerts· Jun 4, 2026

View CSAF Summary Hitachi Energy is aware of a buffer overflow vulnerability that affects MACH HiDraw product versions listed in this document. Successful exploitation of this vulnerability could lead to a buffer overflow condition, potentially resulting in application outages (denial of service) and possible arbitrary code execution. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation. The following versions of Hitachi Energy MACH HiDraw are affected: MACH HiDraw vers:MACH_HiDraw/<=9.22 (CVE-2026-7310) CVSS Vendor Equipment Vulnerabilities v3 5.5 Hitachi Energy Hitachi Energy MACH HiDraw Heap-based Buffer Overflow Background Critical Infrastructure Sectors: Dams, Energy, Transportation Systems Countries [xlite_meta score:73 src:CISA Alerts xlite_fp:785750d03a9060938d048b457c61ebf3e5e498fca99d4554ebb263a1dcb5f9ed]