← Vulnerability feed

Vulnerability record · CVE-2026-2460 · published 24 February 2026

CVE-2026-2460: Hitachienergy reb500 firmware vulnerability

Hitachienergy · Reb500 Firmware

A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and alter the content of directories by using the DAC protocol that the user is not authorized to do so.

7.6 CVSS 4.0 High EPSS 0.29% · top 80.7% CWE-267 · CWE-267
7.6CVSS 4.0 base score
0.29%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
1References
17 Jun 2026Last modified by NVD

Description

A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and alter the content of directories by using the DAC protocol that the user is not authorized to do so.

CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://publisher.hitachienergy.com/preview?DocumentID=8DBD000217&LanguageCode=en&DocumentPartId=&Action=Launch Vendor Advisory

Track CVE-2026-2460 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2022-3353Hitachienergy sys600 firmware improper resource shutdown vulnerabilityA vulnerability exists in the IEC 61850 communication stack that affects multiple Hitachi Energy products.  An attacker could exploit the vulnerabili…EPSS 1.1%7.5CVE-2021-27196Hitachienergy relion 670 firmware improper input validation vulnerabilityImproper Input Validation vulnerability in Hitachi ABB Power Grids Relion 670 Series, Relion 670/650 Series, Relion 670/650/SAM600-IO, Relion 650, RE…EPSS 1.6%7.4CVE-2026-2459Hitachienergy reb500 firmware vulnerabilityA vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of directories that the role is not a…EPSS 0.34%7.8CVE-2025-41244VMware Aria Operations and Tools local privilege escalation to rootVMware Aria Operations and VMware Tools contain a local privilege escalation flaw where a non-administrative local actor on a VM with VMware Tools in…KEVEPSS 8.4%analysed

Source: NIST National Vulnerability Database (record CVE-2026-2460), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.