Skip to content
OpenAdvisories
Critical · 9.1 Public exploit CVE-2026-8065 EUVD-2026-88666GHSA-gg49-9mrv-ff3f

An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthentica…

Published Sep 29, 2026 · Updated Sep 29, 2026 · Assigned by Hitachi Energy

Vendor: Hitachi Energy Product: RTU500 series CMU firmware Category: ICS / OT

Description

An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or compromise the integrity or availability of the device.

Affected products

VendorProductAffectedFixed
Hitachi Energy RTU500 series CMU firmware 9.0 – < 12.0 12.0

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • murrez/CVE-2026-8065 ★ 0 · Sep 29, 2026

    CVE-2026-8065 PoC: Hitachi Energy RTU500 unauth firmware update bypass (CWE-306, CVSS 9.1). IoT/OT colored check + mass exploit — RTU500 fingerprint, firmware endpoint probe, lab-safe upload test. ht…

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 2

References