CVE-2026-10756
NoneCVSS
—
EPSS
0.2%
Published
Oct 27, 2026
CISA due date
—
The record
TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to be reachable only from localhost. By leveraging port forwarding, an attacker can interact with locally bound ports and services, resulting in unauthorized access to sensitive functionality and confidential information, and causing availability impact.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-70212 Improper restriction of communication channel to intended endpoints in Windows Security… CWE-923
- CVE-2026-81871 OpenTelemetry-Go is the Go implementation of OpenTelemetry. CWE-923
- CVE-2026-62836 Improper restriction of communication channel to intended endpoints in Azure SQL Managed… CWE-923
- CVE-2026-18655 Improper restriction of intended endpoints in the RabbitMQ broker connection tools of the… CWE-923
- CVE-2026-23904 Kyuubi Engine UI proxy accepts a host and port from the request path and proxies HTTP… CWE-923
- CVE-2026-63226 Printers and Multifunction Printers (MFPs) provided by Ricoh Company, Ltd. CWE-923
- CVE-2026-8920 Improper Restriction of Communication Channel to Intended Endpoints and External Control… CWE-923
- CVE-2026-57028 An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in… CWE-923