Vulnerability · Published Feb 24, 2026 · Assigned by Hitachi Energy
CVE-2026-1772
Medium 5.3
In plain English
A medium-severity security flaw in RTU500 series CMU firmware from Hitachi Energy. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).
Severity (CVSS 4.0)5.3Medium
Exploit odds (30 days)0.3%top 78.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hitachi Energy | RTU500 series CMU firmware | 12.7.1 – through 12.7.713.5.1 – through 13.5.413.6.1 – through 13.6.213.7.1 – through 13.7.713.8.1 |
Weakness: CWE-280 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N