{"id":"CVE-2026-18783","published":"2026-09-30T15:22:30.350","lastModified":"2026-09-30T16:18:57.403","description":"Missing authentication for critical function vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Authentication Bypass.\n\nThis issue affects Trex MES: through 2026-09-29.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-306"],"vendors":[],"products":[],"references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1225","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A critical function in Trex MES is vulnerable to authentication bypass, allowing unauthorized access to sensitive operations.","exploitability":"Exploitation is relatively easy given the missing authentication, requiring only knowledge of the affected function.","blast_radius":"If exploited, this could lead to full system compromise, data theft, and operational disruption.","remediation":"Upgrade to Trex MES 2026-09-30 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","mes","industrial","critical"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-03T08:50:21.568Z"}}