Hard-coded Credentials Vulnerability in Talassoft Industrial Management Software
CVE-2026-18931

9.1CRITICAL

Key Information:

Vendor: Tmt Machine Industry And Trade Ltd. Co.
Status: Talassoft Industrial Management Software
Vendor: CVE Published:; 1 September 2026

🔔 Create Tmt Machine Industry And Trade Ltd. Co. Vulnerability Alert

What is CVE-2026-18931?

A vulnerability exists in Talassoft Industrial Management Software that employs hard-coded credentials, allowing unauthorized users to retrieve embedded sensitive data. This issue affects various versions from V.4 up to V.16, posing a significant risk to organizations relying on this software for industrial management. Proper assessment and remediation strategies are crucial to mitigate potential data exposure and enhance security.

Affected Version(s)

Talassoft Industrial Management Software V.4

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...

government-resource

CVSS V3.1

Score:

9.1

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 1, 2026
Vulnerability Reserved
Aug 5, 2026

Credit

Efe Özel

Cemil Sefa Özcan

FORDEFENCE

CVE-2026-18931 Data

JSON