As cited
Copy frozen at (site build).
vulnerabilities
Hitachi Energy TRO600 series products
Hitachi Energy disclosed two vulnerabilities affecting TRO600 series products used in energy infrastructure worldwide. CVE-2026-10756 allows an authenticated attacker to bypass network access restrictions and access localhost services, while CVE-2026-106087 permits unauthenticated remote reading of arbitrary files including sensitive configuration and password data. Affected versions are TRO600 9.2.1.6 and prior, with fixes available in versions 9.2.2.1 and 9.1.2.0.
Why it matters: Energy operators running TRO600 devices must immediately update to patched versions to prevent unauthorized access to critical infrastructure systems and disclosure of sensitive operational data. Both vulnerabilities carry CVSS 7.5 to 8.7 severity and affect equipment deployed across multiple countries.
- Source published
- First seen by Cybersecurity Tracker