Is CVE-2026-1772 actively exploited?

No active exploitation of CVE-2026-1772 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-1772 be exploited remotely?

Yes. CVE-2026-1772 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-1772?

CVE-2026-1772 has a CVSS score of 5.3 (MEDIUM) and an EPSS exploitation probability of 0.04%.

HOME VULNERABILITIESCVE-2026-1772

MEDIUM

CVE-2026-1772

CWE-280Published: February 24, 2026· Updated: Feb 27, 2026

5.3

CVSS v3.1

EPSS:0.04%probability of exploitation in 30 daysPercentile:11.4th

Official Description

RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via the RTU500 web user interface but requires further tools like browser development utilities to access them without required privileges.

NVD Source

Technical Analysis

CVE-2026-1772 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges Req.None

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityLow

IntegrityNone

AvailabilityNone

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected Vendors & Products

hitachienergy8 products

rtu520 firmwarertu520rtu530 firmwarertu530rtu540 firmwarertu540rtu560 firmwarertu560

Source: NVD CPE · 12 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Exploit-DB

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

PacketStorm

Security advisories & exploits

External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

ADVISORYhttps://publisher.hitachienergy.com/preview?DocumentID=8DBD000237&LanguageCode=en&DocumentPartId=&Action=Launch

News & Research Mentioning CVE-2026-1772

Hitachi Energy RTU500 Product

CISA Alerts· Mar 3, 2026

View CSAF Summary Hitachi Energy is aware of vulnerabilities that affect RTU500 product versions listed in this document. Successful exploitation of these vulnerabilities can result in the exposure of low-value user management information and device outage. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation. The following versions of Hitachi Energy RTU500 Product are affected: RTU500 series CMU Firmware vers:RTU500_series_CMU_Firmware/>=12.7.1| =13.5.1| =13.6.1| =13.7.1|<=13.7.7, 13.8.1 CVSS Vendor Equipment Vulnerabilities v3 7.5 Hitachi Energy Hitachi Energy RTU500 Product Improper Handling of Insufficient Permissions or Privileges , Incomplete List of Disallowed Inputs, Uncontrolled Recursion, Alloca [xlite_meta score:73 src:CISA Alerts xlite_fp:1eb193be6102ee53dac6c81234ac1f0ac95b4ff046b03575901aff0430d5effb]