CVE-2026-1772

🗓️ 24 Feb 2026 13:03:23Reported by Hitachi EnergyType

CVE-2026-1772: An unprivileged user can read user management data using external tools, not via the RTU500 web interface.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2026-1772	3 Mar 202611:00	–	circl
CNNVD	Hitachi Energy RTU500 安全漏洞	24 Feb 202600:00	–	cnnvd
Cvelist	CVE-2026-1772	24 Feb 202613:03	–	cvelist
EUVD	EUVD-2026-8460	24 Feb 202613:03	–	euvd
NVD	CVE-2026-1772	24 Feb 202614:16	–	nvd
OSV	CVE-2026-1772	24 Feb 202614:16	–	osv
Positive Technologies	PT-2026-21676	24 Feb 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-1772	25 Feb 202616:17	–	redhatcve
Tenable Nessus	Hitachi Energy RTU500 Product Improper Handling of Insufficient Permissions or Privileges (CVE-2026-1772)	4 Mar 202600:00	–	nessus
Vulnrichment	CVE-2026-1772	24 Feb 202613:03	–	vulnrichment

NVD

Node

hitachienergy rtu520_firmwareRange12.7.1–12.7.7

hitachienergy rtu520_firmwareRange13.5.1–13.5.4

hitachienergy rtu520_firmwareRange13.6.1–13.6.2

hitachienergy rtu520_firmwareRange13.7.1–13.7.8

hitachienergy rtu520_firmwareMatch13.8.1

AND

hitachienergy rtu520Match-

Node

hitachienergy rtu530_firmwareRange12.7.1–12.7.7

hitachienergy rtu530_firmwareRange13.5.1–13.5.4

hitachienergy rtu530_firmwareRange13.6.1–13.6.2

hitachienergy rtu530_firmwareRange13.7.1–13.7.8

hitachienergy rtu530_firmwareMatch13.8.1

AND

hitachienergy rtu530Match-

Node

hitachienergy rtu540_firmwareRange12.7.1–12.7.7

hitachienergy rtu540_firmwareRange13.5.1–13.5.4

hitachienergy rtu540_firmwareRange13.6.1–13.6.2

hitachienergy rtu540_firmwareRange13.7.1–13.7.8

hitachienergy rtu540_firmwareMatch13.8.1

AND

hitachienergy rtu540Match-

Node

hitachienergy rtu560_firmwareRange12.7.1–12.7.7

hitachienergy rtu560_firmwareRange13.5.1–13.5.4

hitachienergy rtu560_firmwareRange13.6.1–13.6.2

hitachienergy rtu560_firmwareRange13.7.1–13.7.8

hitachienergy rtu560_firmwareMatch13.8.1

AND

hitachienergy rtu560Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "RTU500 series CMU firmware",
    "vendor": "Hitachi Energy",
    "versions": [
      {
        "lessThanOrEqual": "12.7.7",
        "status": "affected",
        "version": "12.7.1",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "13.5.4",
        "status": "affected",
        "version": "13.5.1",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "13.6.2",
        "status": "affected",
        "version": "13.6.1",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "13.7.7",
        "status": "affected",
        "version": "13.7.1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "13.8.1",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
publisher	www.publisher.hitachienergy.com/preview

27 Feb 2026 18:56Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.15.3

CVSS 45.3

EPSS0.00015

SSVC

CWE-280