CVE-2026-18783 — Missing Server-Side Authentication on REST API Endpoint in Trex Digital Manufacturing's Trex MES

CVE-2026-18783

Missing Server-Side Authentication on REST API Endpoint in Trex Digital Manufacturing's Trex MES PUBLISHED

Description (CNA)

Missing authentication for critical function vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Authentication Bypass. This issue affects Trex MES: through 2026-09-29.

Affected (CNA)

Vendor / product	Versions
Trex Digital Smart Manufacturing Systems Inc. / Trex MES	affected 0 through 2026-09-29

CWE

CWE-306

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1225

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.