View CSAF
Summary
Successful exploitation of these vulnerabilities may allow code execution with elevated privileges.
The following versions of GE Vernova Enervista UR Setup are affected:
Enervista UR Setup <8.70 (CVE-2026-1762, CVE-2026-1763)
CVSS
Vendor
Equipment
Vulnerabilities
v3 7.8
GE Vernova
GE Vernova Enervista UR Setup
Uncontrolled Search Path Element, Path Traversal: '.../...//'
Background
Critical Infrastructure Sectors: Critical Manufacturing, Energy, Water and Wastewater
Countries/Areas Deployed: Worldwide
Company Headquarters Location: United States
Vulnerabilities
Expand All +
CVE-2026-1762
The GE Vernova Enervista UR Setup Installer for versions prior to 8.70 are vulnerable to DLL hijacking. When running the installer in a location with unknown or untrusted DLLs, an attacker could obtain code execution with administrative privileges.
View CVE Details
Affected Products
GE Vernova Enervista UR Setup
Vendor: GE Vernova
Product Version: GE Vernova Enervista UR Setup: <8.70
Product Status: known_affected
Remediations
Vendor fix GE Vernova recommends affected users to use patched versions of Enervista UR Setup: Versions 8.70 or later (https://www.gevernova.com/grid-solutions/resources?prod=urfamily&type=7). https://www.gevernova.com/grid-solutions/resources?prod=urfamily&type=7
Relevant CWE: CWE-427 Uncontrolled Searc...