{"schema_version":"1","data":[{"id":3793,"advisory_id":"3315dde7-6b0c-47b6-9df6-cef0f1d8c1bb","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-8065","source_published_at":"2026-09-29T09:20:07.276+00:00","published_at":"2026-10-24T21:40:48.753778+00:00","extraction_method":"structured","technologies":["core-cve","rtu500-series-cmu-firmware"],"cve_ids":["CVE-2026-8065"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-8065","summary":"An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or compromise the integrity or availability of the device.","evidence":"cve:CVE-2026-8065","products":[{"name":{"value":"RTU500 series CMU firmware","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-8065","aliases":["CVE-2026-8065"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.1,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Hitachi Energy","product":"RTU500 series CMU firmware","versions":[{"status":"affected","version":"9.0","lessThan":"12.0","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-09-29T15:54:11.550Z","provider":"cve","references":["https://publisher.hitachienergy.com/preview?DocumentID=8DBD000251&LanguageCode=en&DocumentPartId=&Action=Launch"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-8065","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T15:53:38.135052Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T15:54:11.550Z"}}],"cna":{"orgId":"e383dce4-0c27-4495-91c4-0db157728d17","shortName":"Hitachi Energy","dateUpdated":"2026-09-29T12:50:06.355Z"}}},"related_cves":[{"value":"CVE-2026-8065","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"context_update":false}],"next_after":3793,"next_before":3793}