Vendors and CVEs › CVEs › CVE-2026-43284
CVE-2026-43284: what it is, who is affected and what to do
Hitachi Energy reported an operating system (OS) command injection flaw and a second flaw called Dirty Frag in CoreTec products. An authenticated user with certain roles could run system commands with full control of the device.
- Scores and exploitation. The stories below cover this flaw together with others, so the Brief does not give its scores here: check the records below.
- Records. CVE-2026-43284 on the National Vulnerability Database · CISA’s known exploited catalog
The story
High
Hitachi Energy CoreTec flaws allow full device control by authenticated users
Hitachi Energy reported an operating system (OS) command injection flaw and a second flaw called Dirty Frag in CoreTec products.