VulnerabilityDeferred

CVE-2026-18771

Missing authentication for critical function vulnerability in TMT Machine Industry and Trade Ltd.

HIGH 7.5EPSS 0.40%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.40%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Missing authentication for critical function vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Authentication Bypass. This issue affects Talassoft Industrial Management Software: from V4 before V.16.

CVSS 3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.40% probability · 34th percentile
CISA KEV: Not listed
Weakness: CWE-306
Source: iletisim@usom.gov.tr

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0965

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.