Insecure HTTP Communication in PROMOD V by Hitachi Energy
CVE-2026-10763

7HIGH

Key Information:

Vendor

Hitachi
Status
Promod V
Vendor
CVE Published:
30 June 2026

What is CVE-2026-10763?

The vulnerability in PROMOD V stems from the use of insecure HTTP communication instead of the more secure HTTPS protocol. This lack of HTTPS support from the 3rd party Digipede server may expose sensitive data to potential interception and unauthorized access, compromising the privacy and integrity of communications within the application.

Affected Version(s)

PROMOD V 1.0.0 <= 1.0.10

References

https://publisher.hitachienergy.com/preview?DocumentID=8D...
vendor-advisory

CVSS V4

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.