Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-18782

SQL Injection in Trex Digital Manufacturing's Trex MES

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: none
  • Automatable: yes
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Command Line Execution through SQL Injection. This issue affects Trex MES: through 2026-09-29.

Affected versions

  • Trex Digital Smart Manufacturing Systems Inc. Trex MES

    through 2026-09-29

References 1

siberguvenlik.gov.tr