Advisories

Hitachi Energy TRO600 series products

Hitachi Energy is aware of multiple vulnerabilities that affect the TRO600 series product versions listed in this document. These vulnerabilities can be exploited for remote code execution (RCE) to carry out further attacks and disclosure of sensitive information. Please refer to the Recommended Immediate Actions section for information about the mitigation/remediation. The following versions of Hitachi Energy TRO600 series products are affected: TRO600 vers:TRO600/ CVSS Vendor Equipment v3 7.5 Hitachi Energy TRO600 2 Vulnerabilities Improper Restriction of Communication Channel to Intended Endpoints, Missing Authentication for Critical Function Background Critical Infrastructure Sectors: En

Read at CISA ICS Advisories

Vendor

Hitachi Energy

Product

Hitachi Energy grid products, Industrial automation (Japan / robotics)

Fix

available

Exposure class

OT / ICS

• CISA ICS Advisories (cisa.gov)
• CVE-2026-10756 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-106087 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 12
   CVE NVD 4d ago

   TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to be…

   CVSS 7.7 CVE-2026-10756 Hitachi Energy
2. 12
   CVE NVD 4d ago

   TRO600 contains an arbitrary file read vulnerability.

   CVSS 8.7 CVE-2026-106087 Hitachi Energy