CVE-2026-106087: High severity vulnerability
Published Oct 27, 2026
·Updated
TRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit this vulnerability to read or download arbitrary files on the affected device, including sensitive configuration files and password data, resulting in the disclosure of sensitive information.
Event History
Oct 27, 2026
CVE Published
via MITRE·11:56 AM
Data Sourced
via MITRE·11:56 AM
DescriptionWeakness
Data Sourced
via NVD·12:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An unauthenticated attacker can exploit it, so no login or prior account access is required.
2
What information could be exposed?
The vulnerability allows reading or downloading arbitrary files from the affected device, including sensitive configuration files and password data.