Live › vulnerability › CVE-2026-106087
Go to dashboardHitachi Energy TRO600 series radios/routers: an unauthenticated network attacker can read or download arbitrary files, including configuration and password data (missing authentication, CWE-306). Affected firmware per the CNA record: 9.0.0.0 through 9.1.1.0. No exploitation or public PoC found.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 12:31 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|
| TRO600 | vendor | >= 9.0.0.0, <= 9.1.1.0 | – |
9.0.0.0 through 9.1.1.0 are affectedunknown: see Hitachi Energy advisory 8DBD000224; until then restrict management access to the device (no internet exposure, firewall/segment it) and rotate credentials stored on it if exposed.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
TRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit this vulnerability to read or download arbitrary files on the affected device, including sensitive configuration files and password data, resulting in the disclosure of sensitive information.
This page as .md · .json · in your agent: get_signal("CVE-2026-106087")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.