Mmastodon TechnologyCybersecurity first seen 7 h ago, last 7 h ago, peak #12

Critical directory traversal flaw reported in Hitachi Energy RTU500

Original: 🔴 CVE-2026-8066 - Critical (9.1) A directory traversal vulnerability in the file upload functionality of Hitachi Energy

A critical vulnerability, tracked as CVE-2026-8066 and scored 9.1, has been disclosed in the file upload functionality of Hitachi Energy's RTU500 remote terminal units. The flaw, which affects end-of-life versions of the device, allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system through directory traversal, potentially compromising industrial control systems.

Why now: The critical severity score and unauthenticated exploitation of an industrial control device raise immediate security concerns for infrastructure operators.

Hitachi EnergyCVE-2026-8066RTU500

Open on mastodon →

Evidence

• 🔴 CVE-2026-8066 - Critical (9.1) A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files… · thehackerwire

API: https://socialmediatrends-api.osmike.com/v1/trends/363643