LiveThreat Vulnerability Brief — CVE‑2026‑1772
What It Is — Hitachi Energy’s RTU500 remote‑terminal‑unit series contains a web‑interface flaw that permits an unauthenticated user to read low‑value user‑management data and, under certain conditions, trigger a device outage. The vulnerability scores 7.5 (CVSS v3.1 – High) and is publicly disclosed with a proof‑of‑concept that leverages browser developer tools. Exploitability — PoC available; active exploitation not yet reported in the wild.
Affected Products — Hitachi Energy RTU500 series firmware versions 12.7.1‑12.7.7, 13.5.1‑13.5.4, 13.6.1‑13.6.2, 13.7.1‑13.7.7, and 13.8.1.
TPRM Impact — The RTU500 is deployed in critical manufacturing and energy‑utility environments worldwide; a breach could expose internal user‑management details and cause localized outages, propagating risk to downstream suppliers and service providers that rely on uninterrupted process control.
Recommended Actions — 1️⃣ Deploy the latest firmware (≥ 13.8.2) or apply vendor‑issued patches. 2️⃣ Restrict web‑UI access to trusted IP ranges and enforce network segmentation. 3️⃣ Enable multi‑factor authentication for any privileged UI accounts. 4️⃣ Monitor for anomalous HTTP requests to the RTU500 UI and log all access attempts. 5️⃣ Conduct a rapid inventory of all RTU500 deployments and verify version compliance. Source: CISA Advisory ICS‑A‑26‑062‑03