CVE-2026-15706

CVSS 9.8 (critical) · published 2026-08-20

Missing authentication for critical function vulnerability in Baylan Measuring Instruments Industry and Trade Inc. Baylan Smart Meter Management Application (BMS) allows Authentication Bypass. This issue affects Baylan Smart Meter Management Application (BMS): before v1.1.10.142.

Weakness: CWE-306

Source: NVD CVE-2026-15706

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0881

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.