Skip to content
NewA calmer, faster ZeroHour
Advisorymedium

Hitachi HiRDB, JP1 and TRO600 firmware affected by vulnerabilities

Original title: [Control systems] Hitachi security advisory (AV26-1091)

Canadian Centre for Cyber Security ()1 min read1
Read at cyber.gc.ca
Part of a story covered by 2 sourcesHitachi Energy TRO600 flaws allow config and password file readsMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

The October 27 bulletin lists many HiRDB and JP1 builds plus TRO600 firmware before 9.2.2.1, with no CVEs or exploitation status.

On October 27, 2026, the Canadian Centre for Cyber Security issued advisory AV26-1091 stating that Hitachi products are affected by vulnerabilities. The notice covers multiple HiRDB Server releases, JP1 job-management and management components, JP1/Base, and TRO600 Series firmware prior to 9.2.2.1. Users and administrators are told to review Hitachi’s vulnerability information and apply the necessary updates. Impact, CVE identifiers and fixed builds other than that firmware cutoff are not stated.

Unconfirmed: The bulletin does not name CVE identifiers, severity ratings, or whether the flaws are exploited.

Key facts
  • HiRDB Server Versions 10, 9 and 9(32), including Additional Function builds, are listed.
  • JP1/Automatic Job Management System 3 Agent, Minimal Edition and Manager are included.
  • JP1/Automatic Job Management 2 Manager and Smart Device Manager are also named.
  • TRO600 Series firmware prior to 9.2.2.1 is the only version bound given.
Security assessment · AI, from the article
ProductAffected
Hitachi HiRDB Server Version 10Multiple versions
Hitachi HiRDB Server Version 9Multiple versions
Hitachi HiRDB Server Version 9(32)Multiple versions
Hitachi HiRDB Server with Additional Function Version 9Multiple versions
Hitachi HiRDB Server with Additional Function Version 9(32)Multiple versions
Hitachi JP1/Automatic Job Management System 3 - AgentMultiple versions
Hitachi JP1/Automatic Job Management System 3 - Agent Minimal EditionMultiple versions
Hitachi JP1/Automatic Job Management System 3 - ManagerMultiple versions
Hitachi JP1/Automatic Job Management 2 – ManagerMultiple versions
Hitachi JP1/Automatic Job Management 2 – Smart Device ManagerMultiple versions
What to do
  1. 1.Review Hitachi’s vulnerability information linked from AV26-1091.
  2. 2.Apply the updates Hitachi provides for the listed products.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Tags
hitachihirdbjp1tro600control-systemsics
Vendors
Hitachi
Products
HiRDB ServerJP1/Automatic Job Management System 3JP1/Automatic Job Management 2JP1/BaseJP1/Integrated Management 3TRO600 Series Firmware
Organizations
Canadian Centre for Cyber Security
Countries
Canada

From the original article

1 min read at cyber.gc.ca

Serial Number: AV26-1091 Date: October 27, 2026 As of October 27, 2026, Hitachi is affected by vulnerabilities in the following products: HiRDB Server Version 10 Multiple versions HiRDB Server Version 9 Multiple versions HiRDB Server Version 9(32) Multiple versions HiRDB Server with Additional Function Version 9 Multiple versions HiRDB Server with Additional Function Version 9(32) Multiple versions JP1/Automatic…

Canadian Centre for Cyber Security

cyber.gc.ca

Read the full article at Canadian Centre for Cyber Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.