Cross-Site Scripting Vulnerability in Talassoft Industrial Management Software by TMT Machinery Industry and Trade Co. Ltd.
CVE-2026-92085

5.4MEDIUM

Key Information:

Vendor: Tmt Machinery Industry And Trade Co. Ltd.
Status: Talassoft Industrial Management Software
Vendor: CVE Published:; 9 October 2026

🔔 Create Tmt Machinery Industry And Trade Co. Ltd. Vulnerability Alert

What is CVE-2026-92085?

A vulnerability in Talassoft Industrial Management Software affects the sanitization of user inputs during web page generation, allowing attackers to execute stored cross-site scripting (XSS) exploits. This issue enables unauthorized users to inject malicious scripts into web pages, potentially compromising sensitive user data and leading to further security breaches. The vulnerability impacts versions prior to 16.0.1, emphasizing the need for users to update to ensure robust security against such threats.

Affected Version(s)

Talassoft Industrial Management Software 0

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...

government-resource

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 9, 2026
Vulnerability Reserved
Sep 15, 2026

Credit

Samet Yılmaz

CVE-2026-92085 Data

JSON