CVE-2026-1772

State: Published
Severity: 5.3 Medium
Published: Feb 24, 2026
Updated: Feb 28, 2026
Reserved: Feb 2, 2026

Description

RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges.

Scores

CVSS	Score	Vector	Source
4.0	5.3 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N	Hitachi Energy

Weaknesses

CWE-280 Improper Handling of Insufficient Permissions or Privileges

Affected Products

Product	Versions
RTU500 series CMU firmwareHitachi Energy	12.7.1 through 12.7.7Affected 13.5.1 through 13.5.4Affected 13.6.1 through 13.6.2Affected 13.7.1 through 13.7.7Affected 13.8.1Affected

References

https://publisher.hitachienergy.com/preview?DocumentID=8DBD000237&LanguageCode=en&DocumentPartId=&Action=Launch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.