Will Hubbell Aclara Metrum vulnerability be added to CISA KEV by end of 2026?

CISA has alerted to a critical vulnerability in Hubbell Aclara Metrum Cellular Web Interface allowing remote attackers to manipulate device settings and disrupt operations. This is an unauthenticated vulnerability affecting smart-grid infrastructure.

Resolution Criteria

CVE number assigned and published in CISA Known Exploited Vulnerabilities (KEV) catalog by December 31, 2026, confirmed on CISA.gov.