View CSAF

Summary

Hitachi Energy is aware of multiple vulnerabilities that affect MicroSCADA X SYS600 product versions listed in this document. These vulnerabilities can be exploited to carry out various attacks on the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.

The following versions of Hitachi Energy MicroSCADA X SYS600 Product are affected:

MicroSCADA X SYS600 vers:MicroSCADA_X_SYS600/<=10.7, 10.8 (CVE-2026-9852, CVE-2026-9853, CVE-2026-9854, CVE-2026-9853)

CVSS Vendor Equipment

v3 7.8 Hitachi Energy MicroSCADA X SYS600

2 Vulnerabilities

Improper Neutralization of Formula Elements in a CSV File, Incorrect Implementation of Authentication Algorithm

Background

Critical Infrastructure Sectors: Energy

Countries/Areas Deployed: Worldwide

Company Headquarters Location: Switzerland

Vulnerabilities

CVE-2026-9852

A CSV injection vulnerability exists in SYS600.…