{"id":"CVE-2026-18783","revision":"feb5f3fdeb5f4797955a92c2500d8423","records":[{"revision":"feb5f3fdeb5f4797955a92c2500d8423","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-18783","aliases":[],"title":"Missing Server-Side Authentication on REST API Endpoint in Trex Digital Manufacturing's Trex MES","description":"Missing authentication for critical function vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Authentication Bypass.\n\nThis issue affects Trex MES: through 2026-09-29.","state":0,"publishedAt":"2026-09-30T14:12:02.32+00:00","modifiedAt":"2026-09-30T15:28:07.269+00:00","affected":[{"ecosystem":"Vendor product","name":"Trex MES","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Trex Digital Smart Manufacturing Systems Inc.\",\n                    \"product\": \"Trex MES\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThanOrEqual\": \"2026-09-29\",\n                            \"versionType\": \"date\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":8.8,"severity":"HIGH"}],"references":["https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1225"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-18783","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-18783","identifiers":["CVE-2026-18783"]},"retained":false,"historicalAffected":[]}],"coverage":[]}