Is CVE-2026-13162 known to be exploited?

It is not marked known-exploited in this record.

CVE-2026-13162

Update CoreTec5 to version 5.0.0. CoreTec4 users should upgrade to CoreTec5 version 5.0.0. Apply vendor-recommended patches immediately. Monitor for unusual authenticated activity or local privilege escalation attempts on affected devices.

Quick answers

What is CVE-2026-13162?: Update CoreTec5 to version 5.0.0. CoreTec4 users should upgrade to CoreTec5 version 5.0.0. Apply vendor-recommended patches immediately. Monitor for unusual authenticated activity or local privilege escalation attempts on affected devices.
How severe is CVE-2026-13162?: high, CVSS 8.8
Is CVE-2026-13162 known to be exploited?: It is not marked known-exploited in this record.
How should CVE-2026-13162 be mitigated?: Update CoreTec5 to version 5.0.0. CoreTec4 users should upgrade to CoreTec5 version 5.0.0. Apply vendor-recommended patches immediately. Monitor for unusual authenticated activity or local privilege escalation attempts on affected devices.

CVSS

8.8

Vendor

Hitachi Energy

Published

Oct 30, 2026 · 04:09

Patch

Unknown / not confirmed

Affected products

CoreTec5, CoreTec4

Mitigation

Hitachi Energy CoreTec Products Patched for Critical OS Command Injection and Privilege Escalation Vulnerabilities

Hitachi Energy has released security updates addressing two critical vulnerabilities in its CoreTec product line. CVE-2026-13162 is an OS command injection flaw allowing authenticated users to execute arbitrary system commands, while CVE-2026-43284 is a privilege escalation vulnerability in the Linux kernel's IPsec ESP subsystem that could allow local unprivileged users to gain root access. Both vulnerabilities affect CoreTec5 and CoreTec4 versions, with patches directing users to upgrade to CoreTec5 version 5.0.0.

12m

CVE-2026-13162

Quick answers

Related News

Hitachi Energy CoreTec Products Patched for Critical OS Command Injection and Privilege Escalation Vulnerabilities