CVE-2026-92085

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TMT Machinery Industry and Trade Co. Ltd. Talassoft Industrial Management Software allows Stored XSS. This issue affects Talassoft Industrial Management Software: before V16.0.1.

Score

CVSS 3.1 5.4 Medium

Status

Deferred - iletisim@usom.gov.tr

Published

2026-10-09

Last modified

2026-10-09

Weaknesses

CWE-79

Affected products

• Talassoft Industrial Management Software (Tmt Machinery Industry And Trade Co. Ltd.)

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1288