CVE-2026-15706 — Missing Authentication for Critical Function in Management API in Baylan Water Meters's BMS

CVE-2026-15706

Missing Authentication for Critical Function in Management API in Baylan Water Meters's BMS PUBLISHED

Description (CNA)

Missing authentication for critical function vulnerability in Baylan Measuring Instruments Industry and Trade Inc. Baylan Smart Meter Management Application (BMS) allows Authentication Bypass. This issue affects Baylan Smart Meter Management Application (BMS): before v1.1.10.142.

Affected (CNA)

Vendor / product	Versions
Baylan Measuring Instruments Industry and Trade Inc. / Baylan Smart Meter Management Application (BMS)	affected 0 before v1.1.10.142

CWE

CWE-306

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0881

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.