CriticalCritical vulnerability

CVE-2026-8066 (CVSS 9.1)

NVD · officialPublished Sep 29, 2026Risk 50/100

A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files affected, successful exploitation could result in unauthorized modification of device data or disruption of the device’s intended operation.

Technical details

CVSS

9.1

AV:NetworkAC:LowPR:NoneUI:NoneC:NoneI:HighA:High

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source