CVE-2026-18630: SQL Injection in TMT Machine's Talassoft Industrial Management Software
Published Sep 1, 2026
·Updated
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows SQL Injection.
This issue affects Talassoft Industrial Management Software: from V.4 before V.16.
Affected Software
1 affected component
TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software>4<16
Event History
Sep 1, 2026
CVE Published
via MITRE·03:08 PM
Data Sourced
via MITRE·03:08 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The CVSS vector indicates the vulnerable service must be reachable over the network and the attacker needs low-level privileges. Exploitation does not require user interaction and is rated low complexity.
2
What could successful exploitation allow?
The reported CVSS impact is high for confidentiality, integrity, and availability. A successful attack could therefore have severe consequences for data exposure, data modification, and service availability.