Is CVE-2026-10756 known to be exploited?

It is not marked known-exploited in this record.

CVE-2026-10756

Update Hitachi Energy TRO600 series firmware/software to version 9.2.2.1 or 9.1.2.0 as appropriate. Apply vendor-recommended firewall configurations and network segmentation to restrict unauthorized access to industrial control system networks. Follow Hitachi Energy's general mitigation guidance regarding physical protection and minimal internet exposure.

Quick answers

What is CVE-2026-10756?: Update Hitachi Energy TRO600 series firmware/software to version 9.2.2.1 or 9.1.2.0 as appropriate. Apply vendor-recommended firewall configurations and network segmentation to restrict unauthorized access to industrial control system networks. Follow Hitachi Energy's general mitigation guidance regarding physical protection and minimal internet exposure.
How severe is CVE-2026-10756?: high, CVSS 8.7
Is CVE-2026-10756 known to be exploited?: It is not marked known-exploited in this record.
How should CVE-2026-10756 be mitigated?: Update Hitachi Energy TRO600 series firmware/software to version 9.2.2.1 or 9.1.2.0 as appropriate. Apply vendor-recommended firewall configurations and network segmentation to restrict unauthorized access to industrial control system networks. Follow Hitachi Energy's general mitigation guidance regarding physical protection and minimal internet exposure.

CVSS

8.7

Vendor

Hitachi Energy

Published

Oct 30, 2026 · 04:09

Patch

Unknown / not confirmed

Affected products

TRO600

Mitigation

CISA Advises of Critical Vulnerabilities in Hitachi Energy TRO600 Series Products

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an industrial control systems advisory warning of multiple vulnerabilities in Hitachi Energy TRO600 series products. The flaws, tracked as CVE-2026-10756 and CVE-2026-106087, affect several software versions and could allow authenticated attackers to bypass network restrictions and unauthenticated attackers to read sensitive files, respectively. Hitachi Energy has released fixes in version 9.2.2.1 and 9.1.2.0.

12m

CVE-2026-10756

Quick answers

Related News

CISA Advises of Critical Vulnerabilities in Hitachi Energy TRO600 Series Products