Directory Traversal Vulnerability in Hitachi Energy RTU500
CVE-2026-8066

9.1CRITICAL

Key Information:

Vendor

Hitachi

Vendor
CVE Published:
29 September 2026

What is CVE-2026-8066?

A directory traversal vulnerability in the Hitachi Energy RTU500's file upload functionality allows an unauthorized attacker to manipulate the device file system. This flaw enables the attacker to write or overwrite files, potentially leading to unauthorized modifications of crucial device data or disruption of the device's normal operations. As a result, the security of the RTU500 can be compromised, posing a risk to overall system integrity and reliability.

Affected Version(s)

RTU500 series CMU firmware 9.0 < 12.0

References

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.