Detections
Analytics
CVE-2026-8065
critical
Description
An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or compromise the integrity or availability of the device.
References
https://www.cisa.gov/news-events/ics-advisories/icsa-26-279-06