CRITICALCVSS 9.1Vulnerability

CVE-2026-8066

A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files affected, successful exploitation could result in unauthorized modification of device data or disruption of the device’s intended operation.

Properties

Severity
CRITICAL
Epss score
0.00736
Cvss score
9.1
Cvss severity
CRITICAL
Retrieved at
2026-10-21T01:24:51+00:00
Last source
FIRST EPSS
Score
9.1
Cve id
CVE-2026-8066
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
First seen by Signal
2026-10-18T14:03:35+00:00
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Published at
2026-09-29T10:17:13.250
Last modified
2026-09-29T21:39:02.570
Epss percentile
0.53696

Related Entities (1)

HAS_WEAKNESS (1)

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-8066 (CVSS 9.1) — Ninja Signal Threat Intelligence | Ninja Signal