CVE-2026-2459

7.4 highEPSS 0.4%

High (7.4) in hitachienergy reb500 firmware. EPSS 0.4% chance of exploitation in the next 30 days.

A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of directories that the role is not authorized to do so.

Severity

CVSS 4.0

7.4 high

CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
CWE: CWE-267
Published: 2026-02-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hitachienergy:reb500_firmware

References

https://publisher.hitachienergy.com/preview?DocumentID=8DBD000217&LanguageCode=en&DocumentPartId=&Action=Launch

Check your stack JSON