CVE-2026-10756
- State
- Published
- Severity
- 7.7 High
- Published
- Oct 27, 2026
- Updated
- Oct 27, 2026
- Reserved
- Jun 3, 2026
Description
TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to be reachable only from localhost. By leveraging port forwarding, an attacker can interact with locally bound ports and services, resulting in unauthorized access to sensitive functionality and confidential information, and causing availability impact.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 7.7 High | CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | Hitachi Energy |
Weaknesses
- CWE-923 Improper Restriction of Communication Channel to Intended Endpoints
Affected Products
| Product | Versions |
|---|---|
TRO600 Series FirmwareHitachi Energy |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.