CVE-2026-18771
Missing Authentication for Critical Function in TMT Machine's Talassoft Industrial Management Software
- State
- Published
- Severity
- 7.5 High
- Published
- Sep 1, 2026
- Updated
- Sep 1, 2026
- Reserved
- Aug 4, 2026
Description
Missing authentication for critical function vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Authentication Bypass.
This issue affects Talassoft Industrial Management Software: from V4 before V.16.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | TR-CERT |
Weaknesses
- CWE-306 Missing authentication for critical function
Affected Products
| Product | Versions |
|---|---|
Talassoft Industrial Management SoftwareTMT Machine Industry and Trade Ltd. Co. |
|
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0965government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.