Network Access Bypass in TRO600 by Hitachi Energy

CVE-2026-10756

What is CVE-2026-10756?

The TRO600 by Hitachi Energy has a vulnerability that permits an authenticated attacker to circumvent network access restrictions, allowing access to services restricted to localhost. This vulnerability can be exploited through port forwarding, enabling the attacker to interact with locally bound services. Such access may lead to unauthorized interactions with sensitive functionality and compromise confidential information, ultimately impacting availability.

References