Vendors and CVEs › CVEs › CVE-2026-9854
CVE-2026-9854: what it is, who is affected and what to do
Hitachi Energy reported multiple vulnerabilities in MicroSCADA X SYS600, including CSV injection, where malicious formulas can alter spreadsheet data, exfiltrate data or run code, and an incorrect authentication algorithm. The vendor CVSS v3 score is 7.8.
- Scores and exploitation. The stories below cover this flaw together with others, so the Brief does not give its scores here: check the records below.
- Records. CVE-2026-9854 on the National Vulnerability Database · CISA’s known exploited catalog
The story
High
Hitachi Energy MicroSCADA X SYS600 has CSV injection and authentication flaws
Hitachi Energy reported multiple vulnerabilities in MicroSCADA X SYS600, including CSV injection, where malicious formulas can alter spreadsheet data, exfiltrate data or run code, and an incorrect authentication…