A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker…
A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files affected, successful exploitation could result in unauthorized modification of device data or disruption of the device’s intended operation.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Hitachi Energy
- Product
- Hitachi Energy grid products, Industrial automation (Japan / robotics)
- CVSS
- 9.1
- Fix
- not yet available
- Exposure class
- OT / ICS
Why it ranks 23 (Routine)
- CVSS 9.1 critical
- Product class: OT / ICS
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-8066 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.