CVE-2026-18783

HighCVSS 8.8

Published: 30/09/2026(UTC)Updated: 30/09/2026(UTC)Translated: 30/09/2026(UTC)NVD NIST

Summary

Trex MES from Trex Digital Smart Manufacturing Systems Inc. contains a missing authentication for critical function vulnerability, allowing authentication bypass. The issue affects versions through 2026-09-29.

Risk Assessment

An attacker can access critical functions without authentication, potentially leading to unauthorized changes in manufacturing processes and security breaches.

Recommendation

Upgrade Trex MES to a version newer than 2026-09-29 that includes the fix.

Other vulnerabilities in Trex MES

CVE-2026-18782Critical
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Command Line Execution through SQL Injection. This issue affects Trex MES: through 2026-09-29.

Original NVD description (English source)

Missing authentication for critical function vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Authentication Bypass. This issue affects Trex MES: through 2026-09-29.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS