CVE-2026-106087

Vendor

Hitachi Energy

Product

TRO600 Series Firmware

CVSS v4.0

8.7 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-306

Exposure class

OT / ICS

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 32
   ICS advisory CISA ICS 2d ago

   Hitachi Energy TRO600 series products

   Hitachi Energy is aware of multiple vulnerabilities that affect the TRO600 series product versions listed in this document. These vulnerabilities can be exploited for remote code execution (RCE) to carry out further attacks and…

   Fix available CVE-2026-10756CVE-2026-106087 Hitachi Energy
2. 12
   CVE NVD 4d ago

   TRO600 contains an arbitrary file read vulnerability.

   TRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit this vulnerability to read or download arbitrary files on the affected device, including sensitive configuration files and password…

   CVSS 8.7 CVE-2026-106087 Hitachi Energy