Is CVE-2026-106087 known to be exploited?

It is not marked known-exploited in this record.

CVE-2026-106087

Update Hitachi Energy TRO600 series firmware/software to version 9.2.2.1 or 9.1.2.0 as appropriate. Apply vendor-recommended firewall configurations and network segmentation to restrict unauthorized access to industrial control system networks. Follow Hitachi Energy's general mitigation guidance regarding physical protection and minimal internet exposure.

Quick answers

What is CVE-2026-106087?: Update Hitachi Energy TRO600 series firmware/software to version 9.2.2.1 or 9.1.2.0 as appropriate. Apply vendor-recommended firewall configurations and network segmentation to restrict unauthorized access to industrial control system networks. Follow Hitachi Energy's general mitigation guidance regarding physical protection and minimal internet exposure.
How severe is CVE-2026-106087?: high, CVSS 8.7
Is CVE-2026-106087 known to be exploited?: It is not marked known-exploited in this record.
How should CVE-2026-106087 be mitigated?: Update Hitachi Energy TRO600 series firmware/software to version 9.2.2.1 or 9.1.2.0 as appropriate. Apply vendor-recommended firewall configurations and network segmentation to restrict unauthorized access to industrial control system networks. Follow Hitachi Energy's general mitigation guidance regarding physical protection and minimal internet exposure.

CVSS

8.7

Vendor

Hitachi Energy

Published

Oct 30, 2026 · 04:07

Patch

Unknown / not confirmed

Affected products

TRO600

Mitigation

CISA Advises of Critical Vulnerabilities in Hitachi Energy TRO600 Series Products

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an industrial control systems advisory warning of multiple vulnerabilities in Hitachi Energy TRO600 series products. The flaws, tracked as CVE-2026-10756 and CVE-2026-106087, affect several software versions and could allow authenticated attackers to bypass network restrictions and unauthenticated attackers to read sensitive files, respectively. Hitachi Energy has released fixes in version 9.2.2.1 and 9.1.2.0.

12m

CVE-2026-106087

Quick answers

Related News

CISA Advises of Critical Vulnerabilities in Hitachi Energy TRO600 Series Products