CVE-2026-8066

CRITICALCVSS 9.11% EPSS

A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files affected, successful exploitation could result in unauthorized modification of device data or disruption of the device’s intended operation.

Published 2026-09-29 · last modified 2026-09-29

Affected products

VendorProduct
hitachi energyrtu500 series cmu firmware

Full record at NVD ↗

← Get alerted the moment a CVE hits your gear — subscribe free

Ncerio by BeyondNets · data from NVD, CISA KEV, EPSS.