CVE-2026-9853highCWE-303

CVE-2026-9853: high-severity vulnerability in Hitachi Energy MicroSCADA SYS600

Published

Follow this CVE+ Monitor MicroSCADA SYS600

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.5epss 0.1%
A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify application objects without being authenticated to the SYS600 system itself. Only the SYS600 system users should be permitted to view and modify application objects.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Hitachi Energy · MicroSCADA SYS600
Related CVEs — Hitachi Energy MicroSCADA SYS600

In the same product, most dangerous first.

CVE-2024-7940HIGHCVE-2024-7940EPSS 0.6%CVE-2024-7941MEDIUMCVE-2024-7941EPSS 0.3%CVE-2024-3982HIGHCVE-2024-3982EPSS 0.2%CVE-2026-9852MEDIUMCVE-2026-9852EPSS 0.2%CVE-2026-9854HIGHCVE-2026-9854EPSS 0.1%