PT-2026-21676 · Rtu500 · Rtu500

Published 2026-02-24 · Updated 2026-02-28 · CVE-2026-1772

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions RTU500 (affected versions not specified)

Description An unprivileged user can read user management information through the RTU500 web interface. Accessing this information requires tools like browser development utilities and does not occur through the standard web user interface. The information is accessible without the necessary privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-280

CWE-287

Related Identifiers

CVE-2026-1772

Affected Products

Rtu500

References · 6

• https://osv.dev/vulnerability/CVE-2026-1772 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-1772 · Security Note
• https://publisher.hitachienergy.com/preview?DocumentID=8DBD000237&LanguageCode=en&DocumentPartId=&Action=Launch · Vendor Advisory
• https://t.me/cveNotify/153557 · Telegram Post
• https://twitter.com/CVEnew/status/2027841531751862473 · Twitter Post
• https://twitter.com/infoflowcloud/status/2027842722036396120 · Twitter Post