Lucene search
+L

12 matches found

Kitploit
Kitploit
•added 2026/10/03 1:17 a.m.•6 views

CVE-2026-18783-TREX-MES-Uygulamalarinda-Yetkisiz-Nesne-Erisimi

TREX-MES-Aplicaciones-Acceso-No-Autorizado-a-Objetos CVE-2026-18783 Descripción General TREX MES es una plataforma comercial de Sistema de Ejecución de Manufactura MES / Industria 4.0 utilizada para recopilar y gestionar datos desde la planta de producción. En los estudios realizados, se ha...

8.8CVSS6AI score0.00353EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/10/03 1:16 a.m.•2 views

CVE-2026-18782-TREX-MES-Uygulamalarinda-SQL-Zafiyeti

TREX-MES-Uygulamalarında-SQLi-Zafiyeti CVE-2026-18782 Descripción general TREX MES es una plataforma comercial de Sistema de Ejecución de Manufactura MES / Industria 4.0 utilizada para recopilar y gestionar datos desde la planta de producción. La API web de la aplicación ejecuta directamente el...

9.8CVSS6AI score0.00484EPSS
SaveExploits0
NVD
NVD
•added 2026/09/30 3:22 p.m.•12 views

CVE-2026-18782

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Command Line Execution through SQL Injection. This issue affects Trex MES: through 2026-09-29...

9.8CVSS0.00484EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/30 3:22 p.m.•11 views

CVE-2026-18783

Missing authentication for critical function vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Authentication Bypass. This issue affects Trex MES: through 2026-09-29...

8.8CVSS0.00353EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/30 2:15 p.m.•6 views

EUVD-2026-89963

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Command Line Execution through SQL Injection. This issue affects Trex MES: through 2026-09-29...

9.8CVSS5.9AI score0.00484EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/30 2:15 p.m.•36 views

CVE-2026-18782 SQL Injection in Trex Digital Manufacturing's Trex MES

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Command Line Execution through SQL Injection. This issue affects Trex MES: through 2026-09-29...

9.8CVSS0.00484EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/30 2:15 p.m.•15 views

CVE-2026-18782

The Trex MES software by Trex Digital Smart Manufacturing Systems Inc. contains an SQL injection vulnerability due to the improper neutralization of special elements in SQL commands. This flaw is severe enough to allow Command Line Execution via the SQL injection vector. The vulnerability affects...

9.8CVSS5.9AI score0.00484EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/30 2:12 p.m.•8 views

EUVD-2026-89961

Missing authentication for critical function vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Authentication Bypass. This issue affects Trex MES: through 2026-09-29...

8.8CVSS5.9AI score0.00353EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/30 2:12 p.m.•18 views

CVE-2026-18783

The Trex MES software by Trex Digital Smart Manufacturing Systems Inc. is vulnerable to an Authentication Bypass due to missing server-side authentication on a REST API endpoint . This vulnerability allows unauthorized access to critical functions. The issue affects versions through 2026-09-29 . ...

8.8CVSS5.9AI score0.00353EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/30 2:12 p.m.•35 views

CVE-2026-18783 Missing Server-Side Authentication on REST API Endpoint in Trex Digital Manufacturing's Trex MES

Missing authentication for critical function vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Authentication Bypass. This issue affects Trex MES: through 2026-09-29...

8.8CVSS0.00353EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•6 views

CVE-2026-18783: Missing Authentication for Critical Function

Missing authentication for critical function vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Authentication Bypass. This issue affects Trex MES: through 2026-09-29...

8.8CVSS5.9AI score0.00353EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•6 views

CVE-2026-18782: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Command Line Execution through SQL Injection. This issue affects Trex MES: through 2026-09-29...

9.8CVSS5.9AI score0.00484EPSS
SaveExploits0References2
Rows per page
Query Builder