Cross-Site Request Forgery in Talassoft Industrial Management Software by TMT Machine Industry and Trade Ltd. Co.
CVE-2026-18780
7.1HIGH
Key Information:
- Vendor
- CVE Published:
- 1 September 2026
What is CVE-2026-18780?
A cross-site request forgery (CSRF) vulnerability exists in Talassoft Industrial Management Software developed by TMT Machine Industry and Trade Ltd. Co. This security flaw allows unauthorized commands to be transmitted from a user that the web application trusts, potentially leading to unauthorized access and actions within the software. The vulnerability affects versions 4 up to 15, making users susceptible to various security threats if the software is not updated.
Affected Version(s)
Talassoft Industrial Management Software V.4