Directory Traversal Vulnerability in Hitachi Energy RTU500
CVE-2026-8066
9.1CRITICAL
What is CVE-2026-8066?
A directory traversal vulnerability in the Hitachi Energy RTU500's file upload functionality allows an unauthorized attacker to manipulate the device file system. This flaw enables the attacker to write or overwrite files, potentially leading to unauthorized modifications of crucial device data or disruption of the device's normal operations. As a result, the security of the RTU500 can be compromised, posing a risk to overall system integrity and reliability.
Affected Version(s)
RTU500 series CMU firmware 9.0 < 12.0