CVE-2026-11796 — Hitachi Energy / Asset Suite

CVE-2026-11796

Hitachi Energy / Asset Suite PUBLISHED

Description (CNA)

Asset Suite allows unauthenticated users to access PropertiesReloadServlet, CacheFlushServlet, MetadataCacheFlushServlet and ResourceBundleReloadServlet, which could result in denial-of-service conditions affecting application availability. These servlets are designed to perform specific functions within production environment depending on how the Asset Suite application is configured.

Affected (CNA)

Vendor / product	Versions
Hitachi Energy / Asset Suite	affected 9.6.0 through 9.9.0

CWE

CWE-306

References

https://publisher.hitachienergy.com/preview?DocumentID=8DBD000254&LanguageCode=en&DocumentPartId=&Action=Launch

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.