CVE-2026-18782

Summary

This vulnerability allows for SQL injection, enabling an attacker to execute arbitrary commands through the SQL interface, leading to potential data theft, system compromise, and unauthorized access.

Exploitability

Exploitation is relatively straightforward given the SQL injection vector, requiring only the ability to inject malicious SQL commands through a command-line interface.

Blast radius

If exploited, the impact could be severe, potentially leading to complete system compromise and data exfiltration, affecting all users and systems interacting with the Trex MES.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Trex MES version 2026-09-30 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.