CVE-2026-1772 Information disclosure in RTU500 series CMU firmware
An unprivileged user can access sensitive user management information in Hitachi Energy RTU500 devices using browser development tools.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-1772?
CVE-2026-1772 is a medium-severity vulnerability in Hitachi Energy RTU500 series CMU firmware, published on 24 Feb 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges.
Weakness: CWE-280
Which versions are affected by CVE-2026-1772?
It affects 4 products.
Products include Hitachienergy Rtu520 Firmware, Hitachienergy Rtu530 Firmware, Hitachienergy Rtu540 Firmware, Hitachienergy Rtu560 Firmware.
How do I fix CVE-2026-1772?
No fix has been published for CVE-2026-1772 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-1772 being exploited?
There is no known exploitation of CVE-2026-1772 in the wild and no public exploit code.
Other vulnerabilities in Hitachi Energy RTU500 series CMU firmware
Sources
Also known as GHSA-pwpc-5pp8-7qw9.