Is CVE-2026-8066 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-8066?

CVE-2026-8066 has a CVSS v3 severity of CRITICAL (9.1).

Back

CVE-2026-8066

Description

A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files affected, successful exploitation could result in unauthorized modification of device data or disruption of the device’s intended operation.