Vulnerability · Published Feb 24, 2026 · Assigned by Hitachi Energy
CVE-2026-2459
High 7.4
In plain English
A high-severity security flaw in Relion REB500 from Hitachi Energy. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).
Severity (CVSS 4.0)7.4High
Exploit odds (30 days)0.4%top 68.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of directories that the role is not authorized to do so.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hitachi Energy | Relion REB500 | 8.0.0.0 – through 8.3.3.0 |
Weakness: CWE-267 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N