CVE-2026-12183
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
Nefteprodukttekhnika BUK TS-G Gas Station Automation System versions 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration module.
Risk Assessment
An unauthorized person may gain access to system configuration, potentially leading to unauthorized changes, disruption of gas station operations, or security breaches.
Recommendation
Update the system to the latest patched version. Also implement strong authentication mechanisms and monitor access.
Original NVD description (English source)
Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration module.

