CVE-2026-18771: Missing Authentication for Critical Function in TMT Machine's Talassoft Industrial Management Software
Published Sep 1, 2026
·Updated
Missing authentication for critical function vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Authentication Bypass.
This issue affects Talassoft Industrial Management Software: from V4 before V.16.
Affected Software
1 affected component
Talassoft Industrial Management Software<4.16
Event History
Sep 1, 2026
CVE Published
via MITRE·02:59 PM
Data Sourced
via MITRE·02:59 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
Talassoft Industrial Management Software versions from V4 before V.16 are affected.
2
What level of access does an attacker need to exploit this issue?
The reported CVSS vector indicates network access is sufficient, with low attack complexity and no required privileges or user interaction.
3
What is the likely security impact?
The issue allows authentication bypass and is rated high severity with a 7.5 CVSS score. The vector indicates an availability impact, with no reported confidentiality or integrity impact.