Trex MES vulnerabilities

2 known vulnerabilities in Trex MES from Trex Digital Smart Manufacturing Systems. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Trex MES: Missing Authentication for Critical Functionality

  CVE-2026-18783Sep 30, 2026Trex Digital Smart Manufacturing Systems

  Missing authentication for critical function vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Authentication Bypass. This issue affects Trex MES: through 2026-09-29.

• 9.8 Critical severity

  Trex MES: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-18782Sep 30, 2026Trex Digital Smart Manufacturing Systems

  Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Command Line Execution through SQL Injection. This issue affects Trex MES: through 2026-09-29.