Summary
Hitachi Energy is aware of open-source software vulnerabilities that affect REB500 product versions listed in this document. These vulnerabilities can be exploited to carry out Denial of Service (DoS) attack on the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
…Summary
Successful exploitation of these vulnerabilities could allow attackers to manipulate device configurations, trigger unauthorized behaviors, and access sensitive information such as device credentials, owner details, and network data without proper authorization.
The following versions of Meari IoT Cloud Platform OpenAPI Service are affected:
- …
Summary
Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges or overwrite files.
The following versions of ABB Protection and Control IED Manager PCM600 are affected:
- Protection and Control IED Manager PCM600 <=2.14 (CVE-2026-15952, CVE-2026-15953)
Summary
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to the database, execute arbitrary code on the host with the highest level of privilege, or gain control of the physical access-control system.
The following versions of Armatura LLC Armatura One …
Summary
Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging stations or disrupt charging services through denial-of-service attacks.
The following versions of Monta monta.app are affected:
- monta.app vers:all/* (CVE-2026-95102, CVE-2026-97363, CVE-2026-97212, CVE-2026-93474)
Summary
Successful exploitation of this vulnerability could allow an attacker to gain access to sensitive information that could be used to conduct further attacks against the system.
The following versions of Johnson Controls EasyIO Neo Series EC and CW Controllers are affected:
- EasyIO …
Summary
Successful exploitation of this vulnerability could allow an attacker to inject malformed messages which may lead to a denial-of-service condition.
The following versions of Baicells Nova 430H are affected:
- Nova 430H eNodeB (model pBS3101SH) <=BaiBLQ_3.0.12 (CVE-2026-96274)
| … |
|---|
Summary
Successful exploitation of this vulnerability may allow attackers to achieve remote command execution on affected devices, potentially with root privileges, leading to full compromise of the camera system.
The following versions of VIVOTEK Camera Firmware are affected:
- V Series model_FD9187 (CVE-2026-22755)
- …