Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

3 matching records.

1. 12
   CVE NVD 4d ago

   An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system commands with…

   An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system commands with full control over the device. The vulnerability exists in the configuration…

   CVSS 7.7 CVE-2026-13162 Hitachi Energy
2. 12
   CVE NVD 4d ago

   TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to be…

   TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to be reachable only from localhost. By leveraging port forwarding, an attacker can interact…

   CVSS 7.7 CVE-2026-10756 Hitachi Energy
3. 12
   CVE NVD 4d ago

   TRO600 contains an arbitrary file read vulnerability.

   TRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit this vulnerability to read or download arbitrary files on the affected device, including sensitive configuration files and password…

   CVSS 8.7 CVE-2026-106087 Hitachi Energy

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Hitachi+Energy&limit=100. RSS for this section: feed.xml.