Search vulnerabilities

Results 2

Export CSV
CVE-2026-2459

Installer Role Exploit Allows Unauthorized Directory Access in Hitachi Energy REB500

A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of directories that the role is not authorized to do so.

CVSS 4.0 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
CVE-2026-2460

Insufficient Authorization Allows Low‑Privilege User to Alter Directories via DAC Protocol

A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and alter the content of directories by using the DAC protocol that the user is not authorized to do so.

CVSS 4.0 · 7.6 High EPSS < 1% KEV · Not listed
Vendors