Paper/Archive/CVE-2026-15706

CVE-2026-15706

Baylan Measuring Instruments Industry and Trade Inc. Baylan Smart Meter Management Application (BMS) — Missing Authentication for Critical Function in Management API in Baylan Water Meters's BMS

EPSS 0.6%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 50.8.508 × 2010.2 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Missing authentication for critical function vulnerability in Baylan Measuring Instruments Industry and Trade Inc. Baylan Smart Meter Management Application (BMS) allows Authentication Bypass. This issue affects Baylan Smart Meter Management Application (BMS): before v1.1.10.142.

Affected

ProductAffectedFixed inSource

Baylan Smart Meter Management Application (BMS)< v1.1.10.142v1.1.10.142CNA

Scores by source

TR-CERT (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0881