🔐 CVE Alert

CVE-2026-18931

CRITICAL 9.1

Hardcoded Credentials in TMT Machine's Talassoft Industrial Management Software

CVSS Score
9.1
EPSS Score
0.0%
EPSS Percentile
0th

Use of Hard-coded Credentials vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Retrieve Embedded Sensitive Data. This issue affects Talassoft Industrial Management Software: from V.4 before V.16.

CWE CWE-798
Vendor tmt machine industry and trade ltd. co.
Product talassoft industrial management software
Published Sep 1, 2026
Last Updated Sep 1, 2026
Stay Ahead of the Next One

Get instant alerts for tmt machine industry and trade ltd. co. talassoft industrial management software

Be the first to know when new critical vulnerabilities affecting tmt machine industry and trade ltd. co. talassoft industrial management software are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None

Affected Versions

TMT Machine Industry and Trade Ltd. Co. / Talassoft Industrial Management Software
V.4 < V.16

References

NVD ↗ CVE.org ↗ EPSS Data ↗
siberguvenlik.gov.tr: https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0965

Credits

Efe Özel Cemil Sefa Özcan FORDEFENCE