CVE-2026-8065

Summary

An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows unauthenticated attackers to upload arbitrary firmware, potentially compromising the device's functionality.

Exploitability

Exploitation is relatively straightforward as it requires crafting a POST request to the firmware update endpoint, which can be automated.

Blast radius

If exploited, the attacker could modify the device's functionality or compromise its integrity and availability, leading to potential operational disruptions.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the firmware update feature or restrict access to the firmware update endpoint.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.