CVE-2026-9854 — Hitachi Energy / MicroSCADA SYS600

CVE-2026-9854

Hitachi Energy / MicroSCADA SYS600 PUBLISHED

Description (CNA)

A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator level on the underlying Windows host, granting themselves full control over the host machine.

Affected (CNA)

Vendor / product	Versions
Hitachi Energy / MicroSCADA SYS600	affected 10.0 through 10.7

CWE

CWE-303

References

https://publisher.hitachienergy.com/preview?DocumentID=8DBD000249&LanguageCode=en&DocumentPartId=&Action=Launch

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.