Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2026-8065

An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Hitachi Energy

Description

An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or compromise the integrity or availability of the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hitachi Energy RTU500 series CMU firmware

Default version status: unaffected

  • 9.0 to < 12.0affected

References