SQL Injection Vulnerability in Trex Digital Smart Manufacturing Systems
CVE-2026-18782

9.8CRITICAL

Key Information:

Vendor: Trex Digital Smart Manufacturing Systems Inc.
Status: Trex Mes
Vendor: CVE Published:; 30 September 2026

🔔 Create Trex Digital Smart Manufacturing Systems Inc. Vulnerability Alert

What is CVE-2026-18782?

An SQL injection vulnerability exists in Trex Digital Smart Manufacturing Systems Inc.'s Trex MES, allowing for command line execution through improperly sanitized SQL commands. This vulnerability poses a significant risk as it could enable unauthorized manipulation of the database, potentially leading to data breaches and system compromise. Users are advised to implement security measures to safeguard against such attacks and patch affected systems promptly.

Affected Version(s)

Trex MES 0 <= 2026-09-29

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...

government-resource

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 30, 2026
Vulnerability Reserved
Aug 4, 2026

Credit

Hasan Hüseyin UYAR

CVE-2026-18782 Data

JSON