CVE-2026-1772
RTU500 web interface: An unprivileged user can read user management information.
Published Feb 24, 2026 · updated Jun 17, 2026 · hitachienergy rtu520 firmware
RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Feb 24, 2026 · NIST NVD
Detected
RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges.
Jun 17, 2026 · NIST NVD
Updated
RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges.
Affected
- cpe hitachienergy/rtu520 firmwareversion unspecified
- cpe hitachienergy/rtu520 firmware13.8.1
- cpe hitachienergy/rtu530 firmwareversion unspecified
- cpe hitachienergy/rtu540 firmwareversion unspecified
- cpe hitachienergy/rtu560 firmwareversion unspecified
Sources
- NIST NVDVulnerability recordCVE-2026-1772
RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges.
nvd.nist.gov