Trex Digital Smart Manufacturing Systems Inc. vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Trex Digital Smart Manufacturing Systems Inc. products: 2 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-18783 High · 8.8 CWE-306 Sep 30, 2026

Missing Server-Side Authentication on REST API Endpoint in Trex Digital Manufacturing's Trex MES

Missing authentication for critical function vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Authentication Bypass. This issue affects Trex MES: through 2026-09-29.

CVE-2026-18782 Critical · 9.8 CWE-89 Sep 30, 2026

SQL Injection in Trex Digital Manufacturing's Trex MES

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Command Line Execution through SQL Injection. This issue affects Trex MES: through 2026-09-29.