CVE-2026-15706
Critical
Description
Missing authentication for critical function vulnerability in Baylan Measuring Instruments Industry and Trade Inc. Baylan Smart Meter Management Application (BMS) allows Authentication Bypass. This issue affects Baylan Smart Meter Management Application (BMS): before v1.1.10.142.
SeverityCritical
CVSS9.8
Exploit probability—
ProductBaylan Smart Meter Management Application (BMS)
PublishedAug 20, 2026
First seenAug 20, 2026
Weakness typeCWE-306Missing authentication for critical function
How to fix
Update
- Baylan Measuring Instruments Industry and Trade Inc. Baylan Smart Meter Management Application (BMS)v1.1.10.142 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Baylan Measuring Instruments Industry and Trade Inc. Baylan Smart Meter Management Application (BMS) | v < v1.1.10.142 | v1.1.10.142 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.