TMT Machine Industry and Trade Ltd. Co. vulnerabilities
Published CVEs affecting TMT Machine Industry and Trade Ltd. Co. products: 4 record(s), with severity, exploitation and fixes.
CVE-2026-18931
Critical · 9.1
CWE-798 Sep 1, 2026
Hardcoded Credentials in TMT Machine's Talassoft Industrial Management Software
Use of Hard-coded Credentials vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Retrieve Embedded Sensitive Data.
This issue affects Talassoft Industrial Management Software: from V.4 before V.16.
CVE-2026-18780
High · 7.1
CWE-352 Sep 1, 2026
CSRF in TMT Machine's Talassoft Industrial Management Software
Cross-Site request forgery (CSRF) vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Cross Site Request Forgery.
This issue affects Talassoft Industrial Management Software: from V.4 before V.16.
CVE-2026-18771
High · 7.5
CWE-306 Sep 1, 2026
Missing Authentication for Critical Function in TMT Machine's Talassoft Industrial Management Software
Missing authentication for critical function vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Authentication Bypass.
This issue affects Talassoft Industrial Management Software: from V4 before V.16.
CVE-2026-18630
High · 8.8
CWE-89 Sep 1, 2026
SQL Injection in TMT Machine's Talassoft Industrial Management Software
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows SQL Injection.
This issue affects Talassoft Industrial Management Software: from V.4 before V.16.