CVE-2026-7395Published

Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used for configuration file upload, leading to information disclosure and integrity compromise. The HTTPPublishAdapterTestServlet is specifically m…

Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

cve-program · CVE-2026-7395

Published

Asset Suite

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Hitachi Energy",
                    "product": "Asset Suite",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "9.6.0",
                            "lessThanOrEqual": "9.9.0",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON