VulnSocial

CVE-2026-9853(hitachienergy / microscada_x_sys600)

LOWCVSS 7.8 · HIGH

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify application objects without being authenticated to the SYS600 system itself. Only the SYS600 system users should be permitted to view and modify application objects.

hitachienergy CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-303

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • microscada_x_sys600

Affected systems

Vendors
hitachienergy
Products
microscada_x_sys600

Deep dive

Full discourse1 post
  • DuckButTurttle@DuckButTurttle

    CISA published advisories for Hitachi Energy RTU500 (9 CVEs, top CVE-2026-6653, CVSS 8.8) and MicroSCADA X SYS600 (CVE-2026-9853, CVSS 7.8), both used in grid automation. No known exploitation. CISA https://www.cisa.gov/news-events/ics-advisories/icsa-26-293-05 #ICS

    0000020
    9 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Apphitachienergymicroscada_x_sys600---

Explore more

Back to dashboardhitachienergy CVEsmicroscada_x_sys600 vulnerabilities