CVE-2026-13162

Vendor

Hitachi Energy

Product

CoreTec 5, CoreTec 4

CVSS v4.0

7.7 AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-78

Exposure class

OT / ICS

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 33
   ICS advisory CISA ICS 2d ago

   Hitachi Energy CoreTec Product

   Hitachi Energy is aware of OS command injection and Dirty Frag vulnerabilities that affect CoreTec product versions listed in this document. Successful exploitation of these vulnerabilities could result in impact on…

   CVE-2026-13162CVE-2026-43284 Hitachi Energy
2. 12
   CVE NVD 4d ago

   An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system commands with…

   An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system commands with full control over the device. The vulnerability exists in the configuration…

   CVSS 7.7 CVE-2026-13162 Hitachi Energy