CVE-2026-1762: Enervista UR Setup Directory Traversal Vulnerability
Published Feb 10, 2026
·Updated
A vulnerability in GE Vernova Enervista UR Setup on Windows allows File Manipulation.This issue affects Enervista: 8.6 and prior versions.
Affected Software
1 affected component
GE Vernova Enervista<8.6
Remediation
Information
We strongly recommend that users with impacted firmware versions update their UR devices to UR
firmware version 8.70, released in November 2025, to resolve these vulnerabilities. We also recommend
upgrading the EnerVista UR Setup configuration tool to version 8.70 or greater.
Enervista UR Setup software is backward compatible, users can upgrade it to version 8.70,
independently of upgrading their UR IED to FW v870.
Event History
Feb 10, 2026
CVE Published
via MITRE·08:06 PM
Data Sourced
via MITRE·08:06 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-1762?
CVE-2026-1762 has a high severity rating due to its potential for file manipulation on affected systems.
2
How do I fix CVE-2026-1762?
To mitigate CVE-2026-1762, upgrade to a version of GE Vernova Enervista that is newer than 8.6.
3
What products are affected by CVE-2026-1762?
CVE-2026-1762 affects GE Vernova Enervista versions 8.6 and earlier.
4
What type of vulnerability is CVE-2026-1762?
CVE-2026-1762 is a directory traversal vulnerability that allows unauthorized file manipulation.
5
What platforms are impacted by CVE-2026-1762?
CVE-2026-1762 impacts the Windows operating system when using the affected versions of Enervista.