CVE-2026-15706CWE-306

CVE-2026-15706

Critical · published August 20, 2026

CVSS v3.1

9.8

EPSS

Percentile

50.2

In the wild

Unconfirmed

What it is

Missing authentication for critical function vulnerability in Baylan Measuring Instruments Industry and Trade Inc. Baylan Smart Meter Management Application (BMS) allows Authentication Bypass.

This issue affects Baylan Smart Meter Management Application (BMS): before v1.1.10.142.

The record

Technical detail

CVSS v3.1: 9.8 · CRITICAL
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.00643 · 50.2th percentile
Weakness: CWE-306 · Missing Authentication for Critical Function
Published: 2026-08-20T18:17Z

References (1)

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0881 · [email protected]

EPSS history

Timeline

20 AUG 13:27Z
Missing Authentication for Critical Function in Management API in Baylan Water Meters's BMS
cvelistv5