CISA 2026-10-29

Hitachi Energy TRO600 series products

Machine-generated analysis · WAYSCloud LLM

TRO600 versions up to 9.2.1.6 are vulnerable to authenticated remote code execution via localhost service bypass and to unauthenticated arbitrary file read.

Context

The advisory concerns Hitachi Energy TRO600 series devices, specifically versions 9.2.1.6 and earlier, as well as 9.1.1.0, 9.2.2.1, and 9.1.2.0. It reports CVE-2026-10756, which allows an authenticated attacker to bypass network restrictions and access localhost-bound services, and CVE-2026-106087, which enables an unauthenticated attacker to read arbitrary files. Hitachi Energy offers a remediation by updating the product to version 9.2.2.1.

Operator considerations

Check: verify the installed TRO600 version against the affected list.
Patch: apply the vendor-provided update to version 9.2.2.1.

From Cybersecurity and Infrastructure Security Agency ↗

Hitachi Energy is aware of multiple vulnerabilities that affect the TRO600 series product versions listed in this document. These vulnerabilities can be exploited for remote code execution (RCE) to carry out further attacks and disclosure of sensitive information. Please refer to the Recommended Immediate Actions section for information about the mitigation/remediation.

The following versions of Hitachi Energy TRO600 series products are affected:

TRO600 vers:TRO600/

Read the full advisory on CISA →