VYPR

Bukts Auth Bypass

by Ciprobe

Source repositories

CVEs (1)

  • CVE-2026-12183CriJun 13, 2026
    risk 0.64cvss 9.8epss

    Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration module. The /php/ajax-login.php endpoint returns userid=1 (administrator) in response to any HTTP…