CVE-2026-18783 — Missing Server-Side Authentication on REST API Endpoint in Trex Digital Manufacturing's Trex MES
Missing authentication for critical function vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Authentication Bypass. This issue affects Trex MES: …
Published: 2026-09-30 · CVSS: 8.8 · CVSS 3.1
Missing authentication for critical function vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Authentication Bypass. This issue affects Trex MES: through 2026-09-29.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7