CVE-2026-8066
Quick assessment
Affected
Hitachi Energy RTU500 series CMU firmware
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Hitachi Energy RTU500 的文件上传功能中存在目录遍历漏洞，该漏洞允许未认证的向设备文件系统写入或覆盖任意文件。根据受影响文件的具体情况，成功利用此漏洞可能导致设备数据被未经授权的修改，或导致设备无法按其预期正常运行。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-8066
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files affected, successful exploitation could result in unauthorized modification of device data or disruption of the device’s intended operation.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
相对路径遍历
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Hitachi Energy | RTU500 series CMU firmware | 9.0 ~ 12.0 | - |
|
II. Public POCs for CVE-2026-8066
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-8066
请登录查看更多情报信息。
Other References for CVE-2026-8066 (1)
Same Patch Batch · Hitachi Energy · 2026-09-29 · 5 CVEs total
| CVE-2026-8065 | 9.1 CRITICAL | CVE-2026-8065 |
| CVE-2026-7395 | 8.5 HIGH | Asset Suite HTTPPublishAdapterTestServlet未授权访问漏洞 |
| CVE-2026-8067 | 6.5 MEDIUM | CVE-2026-8067 |
| CVE-2026-11796 | 5.1 MEDIUM | Asset Suite未授权访问Servlet致拒绝服务漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-23
-
CVE-2026-93537
Path traversal in Fleet Helm valuesFiles allows disclosure o -
CVE-2026-93468
HGiga｜OAKlouds - Arbitrary File Read -
CVE-2026-76424
Cisco ISE Arbitrary File Access Vulnerability -
CVE-2026-76440
Cisco Secure Email Gateway Security Hardening Release -
CVE-2026-82765
Contec FX5000 series 路径遍历漏洞
V. Comments for CVE-2026-8066
No comments yet