PT-2026-21687 · Reb500 · Reb500

Published 2026-02-24 · Updated 2026-03-01 · CVE-2026-2459

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions REB500 (affected versions not specified)

Description An authenticated user with Installer role can access and modify the contents of directories they are not authorized to access or alter.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-267

Related Identifiers

CVE-2026-2459

Affected Products

Reb500

References · 9

• https://publisher.hitachienergy.com/preview?DocumentID=8DBD000217&LanguageCode=en&DocumentPartId=&Action=Launch · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-2459 · Security Note
• https://osv.dev/vulnerability/CVE-2026-2459 · Vendor Advisory
• https://twitter.com/infoflowcloud/status/2027842614070813103 · Twitter Post
• https://twitter.com/CVEnew/status/2027841529184964651 · Twitter Post
• https://twitter.com/cracbot/status/2028062795980566720 · Twitter Post
• https://twitter.com/cracbot/status/2027700485441130893 · Twitter Post
• https://twitter.com/TheHackerWire/status/2027104413991747590 · Twitter Post
• https://t.me/cveNotify/153354 · Telegram Post