Severe Access Issue in Hitachi Energy's Asset Suite
CVE-2026-11796

5.1MEDIUM

Key Information:

Vendor

Hitachi
Status
Asset Suite
Vendor
CVE Published:
29 September 2026

What is CVE-2026-11796?

The Asset Suite by Hitachi Energy exposes multiple servlets, allowing unauthenticated users to access sensitive functionalities such as PropertiesReloadServlet, CacheFlushServlet, MetadataCacheFlushServlet, and ResourceBundleReloadServlet. This exposure could lead to denial-of-service conditions, potentially impacting the availability of the application based on its configuration. Organizations using this software need to be aware of this vulnerability and implement measures to mitigate unauthorized access.

Affected Version(s)

Asset Suite 9.6.0 <= 9.9.0

References

https://publisher.hitachienergy.com/preview?DocumentID=8D...

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.