Is CVE-2026-15706 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-15706?

CVE-2026-15706 has a CVSS v3 severity of CRITICAL (9.8).

Back

CVE-2026-15706

Description

Missing authentication for critical function vulnerability in Baylan Measuring Instruments Industry and Trade Inc. Baylan Smart Meter Management Application (BMS) allows Authentication Bypass. This issue affects Baylan Smart Meter Management Application (BMS): before v1.1.10.142.