An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated…
An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or compromise the integrity or availability of the device.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Hitachi Energy
- Product
- Hitachi Energy grid products, Industrial automation (Japan / robotics)
- CVSS
- 9.1
- Fix
- not yet available
- Exposure class
- OT / ICS
Why it ranks 29 (Notable)
- CVSS 9.1 critical
- Product class: OT / ICS
- Covered by 2 independent sources
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-8065 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.