CVE-2026-15706

Full vulnerability record from the local CVENow database.

Description

Missing authentication for critical function vulnerability in Baylan Measuring Instruments Industry and Trade Inc. Baylan Smart Meter Management Application (BMS) allows Authentication Bypass. This issue affects Baylan Smart Meter Management Application (BMS): before v1.1.10.142.

Severity

CRITICAL

CVSS score

9.8 (v3.1)

Vulnerability status

Deferred

Source identifier

[email protected]

Published

2026-08-20 14:17:09.617000

Last modified

2026-10-27 10:10:00.240000

View original CVE JSON

{
  "id": "CVE-2026-15706",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-20T14:17:09.617",
  "lastModified": "2026-10-27T10:10:00.240",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Missing authentication for critical function vulnerability in Baylan Measuring Instruments Industry and Trade Inc. Baylan Smart Meter Management Application (BMS) allows Authentication Bypass.\n\nThis issue affects Baylan Smart Meter Management Application (BMS): before v1.1.10.142."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de ausencia de autenticación para función crítica en la Aplicación de Gestión de Medidores Inteligentes Baylan (BMS) de Baylan Measuring Instruments Industry and Trade Inc. permite la omisión de autenticación.\n\nEste problema afecta a la Aplicación de Gestión de Medidores Inteligentes Baylan (BMS): anterior a la v1.1.10.142."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Baylan Measuring Instruments Industry and Trade Inc.",
          "product": "Baylan Smart Meter Management Application (BMS)",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThan": "v1.1.10.142",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-20T15:58:41.172269Z",
          "id": "CVE-2026-15706",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-306"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0881",
      "source": "[email protected]"
    }
  ]
}