Is CVE-2026-8065 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-8065?

CVE-2026-8065 has a CVSS v3 severity of CRITICAL (9.1).

Back

CVE-2026-8065

Description

An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or compromise the integrity or availability of the device.