CVE-2026-8065 — Hitachi Energy / RTU500 series CMU firmware

CVE-2026-8065

Hitachi Energy / RTU500 series CMU firmware PUBLISHED

Description (CNA)

An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or compromise the integrity or availability of the device.

Affected (CNA)

Vendor / product	Versions
Hitachi Energy / RTU500 series CMU firmware	affected 9.0 before 12.0

CWE

CWE-306

References

https://publisher.hitachienergy.com/preview?DocumentID=8DBD000251&LanguageCode=en&DocumentPartId=&Action=Launch

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.