CVE-2026-18783
8.8 HIGHPublished 2026-09-30 · Updated 2026-09-30
AI risk analysis
- Summary
- A critical function in Trex MES is vulnerable to authentication bypass, allowing unauthorized access to sensitive operations.
- Exploitability
- Exploitation is relatively easy given the missing authentication, requiring only knowledge of the affected function.
- Blast radius
- If exploited, this could lead to full system compromise, data theft, and operational disruption.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to Trex MES 2026-09-30 or later.
auth-bypassmesindustrialcritical
Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Missing authentication for critical function vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Authentication Bypass. This issue affects Trex MES: through 2026-09-29.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-306
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2026-103956PoC
- CRITICALCVE-2026-105110PoC
- CRITICALCVE-2026-105192PoC
- CRITICALCVE-2026-63692
- CRITICALCVE-2026-100721PoC
- CRITICALCVE-2026-100886PoC
- CRITICALCVE-2026-103752
- CRITICALCVE-2026-104732
Related by shared AI tags and CWE weakness class. Browse the full archive.