Hitachi Energy vulnerabilities

CVEs per yearBy the year they were published

1. 20217
2. 202214
3. 202328
4. 202429
5. 202520
6. 202620

Newest CVEs

• CVE-2026-106087

  TRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit this vulnerability to read or download arbitrary files on the…

  Hitachi Energy · TRO600 Series Firmware

  High8.7
• CVE-2026-10756

  TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to be reachable only…

  Hitachi Energy · TRO600 Series Firmware

  High7.7
• CVE-2026-13162

  An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system commands with full control…

  Hitachi Energy · CoreTec 5

  High7.7
• CVE-2026-11796

  Asset Suite allows unauthenticated users to access PropertiesReloadServlet, CacheFlushServlet, MetadataCacheFlushServlet and ResourceBundleReloadServlet, which…

  Hitachi Energy · Asset Suite

  Medium5.1
• CVE-2026-7395

  Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used for configuration file upload, leading to information…

  Hitachi Energy · Asset Suite

  High8.5
• CVE-2026-8067

  An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated user to trigger the RTU500 to reboot…

  Hitachi Energy · RTU500 series CMU firmware

  Medium6.5
• CVE-2026-8066

  A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write…

  Hitachi Energy · RTU500 series CMU firmware

  Critical9.1
• CVE-2026-8065

  An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to…

  Hitachi Energy · RTU500 series CMU firmware

  Critical9.1
• CVE-2026-17539

  RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference in the last entry…

  Hitachi Energy · RTU500 series CMU firmware

  Medium5.9
• CVE-2026-9854

  A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator level on the…

  Hitachi Energy · MicroSCADA SYS600

  High8.5