VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Feb 24, 2026· Updated Jun 17, 2026

CVE-2026-1772

CVE-2026-1772

Description

RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges.

Affected products

10
  • Hitachienergy/Rtu520 Firmware2 versions
    cpe:2.3:o:hitachienergy:rtu520_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:hitachienergy:rtu520_firmware:*:*:*:*:*:*:*:*range: >=12.7.1,<=12.7.7
    • cpe:2.3:o:hitachienergy:rtu520_firmware:13.8.1:*:*:*:*:*:*:*
  • Hitachienergy/Rtu530 Firmware2 versions
    cpe:2.3:o:hitachienergy:rtu530_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:hitachienergy:rtu530_firmware:*:*:*:*:*:*:*:*range: >=12.7.1,<=12.7.7
    • cpe:2.3:o:hitachienergy:rtu530_firmware:13.8.1:*:*:*:*:*:*:*
  • Hitachienergy/Rtu540 Firmware2 versions
    cpe:2.3:o:hitachienergy:rtu540_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:hitachienergy:rtu540_firmware:*:*:*:*:*:*:*:*range: >=12.7.1,<=12.7.7
    • cpe:2.3:o:hitachienergy:rtu540_firmware:13.8.1:*:*:*:*:*:*:*
  • Hitachienergy/Rtu560 Firmware2 versions
    cpe:2.3:o:hitachienergy:rtu560_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:hitachienergy:rtu560_firmware:*:*:*:*:*:*:*:*range: >=12.7.1,<=12.7.7
    • cpe:2.3:o:hitachienergy:rtu560_firmware:13.8.1:*:*:*:*:*:*:*
  • Hitachi/RTU500llm-create
  • Hitachi Energy/RTU500 series CMU firmwarev5
    Range: 12.7.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.