What is the CVSS score of EUVD-2026-69382?

EUVD-2026-69382 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.4%.

Which versions of Talassoft Industrial Management are affected by EUVD-2026-69382?

Talassoft Industrial Management Software (versions V4-V15.x) by TMT Machine Industry and Trade Ltd.

How to fix or mitigate EUVD-2026-69382?

Within 24 hours, conduct an inventory of all Talassoft deployments and evaluate external network exposure for each instance. Within 7 days, implement protective measures including network segmentation to isolate Talassoft systems from untrusted networks, deploy firewall rules to restrict access by IP or administrative role, and activate detailed audit logging on all function calls to this software. Within 30 days, engage the vendor to confirm availability of patched V16 or later release, establish a formal upgrade timeline with business stakeholders, and maintain strict access controls until upgrade is completed.

Talassoft Industrial Management EUVD-2026-69382

| CVE-2026-18771 HIGH

Missing Authentication for Critical Function (CWE-306)

2026-09-01 iletisim@usom.gov.tr

GHSA-2369-qr3g-mg2m

Authentication Bypass

7.5

CVSS 3.1 · Vendor: usom

Severity by source

Vendor (usom) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

vuln.today AI

9.8 CRITICAL

Authentication bypass of a critical function implies full unauthorized access; C:N/I:N in the original vector is analytically inconsistent with CWE-306 and likely underscopes impact.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (usom).

CVSS VectorVendor: usom

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Sep 01, 2026 - 15:45 vuln.today

CVE Published

Sep 01, 2026 - 15:17 nvd

HIGH 7.5

DescriptionCVE.org

Missing authentication for critical function vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Authentication Bypass.

This issue affects Talassoft Industrial Management Software: from V4 before V.16.

AnalysisAI

Missing authentication for a critical function in TMT Machine Industry and Trade Ltd. Co.'s Talassoft Industrial Management Software exposes industrial operations to unauthenticated remote attackers who can access and invoke privileged functionality without credentials. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	No special configuration is required beyond the vulnerable version (V4 through V15.x) being reachable over the network. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS base score of 7.5 (High) is driven primarily by the zero-friction attack profile: network-accessible (AV:N), low complexity (AC:L), no privileges (PR:N), and no user interaction (UI:N). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Upgrade Talassoft Industrial Management Software to V.16 or later, which resolves the missing authentication issue per the USOM advisory at https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0965. … Detailed patch versions, workarounds, and compensating controls in full report.