CVE-2026-7395

UNKNOWN

Description

Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used for configuration file upload, leading to information disclosure and integrity compromise. The HTTPPublishAdapterTestServlet is specifically meant for testing purposes to be used in a non-production environment.

Timeline

Published:September 29th, 2026 10:17 AM

Last modified:September 29th, 2026 9:39 PM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-306

References & Reports

Advisories, patches, and third-party reports

https://publisher.hitachienergy.com/preview?DocumentID=8DBD000254&LanguageCode=en&DocumentPartId=&Action=Launch

Source: NIST NVD · Data may lag official sources by up to one minute