CVE-2026-15706

CriticalCVSS 9.8

Published: 20/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 20/08/2026(UTC)NVD NIST

Summary

Baylan Smart Meter Management Application (BMS) before v1.1.10.142 has a missing authentication for critical function vulnerability, allowing authentication bypass.

Risk Assessment

An attacker can gain unauthorized access to critical functions of the application, potentially leading to data manipulation or disruption.

Recommendation

Update Baylan BMS to version v1.1.10.142 or later.

Original NVD description (English source)

Missing authentication for critical function vulnerability in Baylan Measuring Instruments Industry and Trade Inc. Baylan Smart Meter Management Application (BMS) allows Authentication Bypass. This issue affects Baylan Smart Meter Management Application (BMS): before v1.1.10.142.