CVE-2026-12183: Critical Auth Bypass in Gas Station Automation System

**Critical authentication bypass (CVE-2026-12183) in BUK TS-G Gas Station Automation System:** versions 2.9.1–2.10.2 on Linux contain a flaw where any HTTP POST to /php/ajax-login.php returns userid=1 (administrator), allowing unauthenticated full administrative access to fuel dispensing and station management functions; the advisory includes technical analysis, exploitation steps, impact assessment on ICS/OT operations, detection indicators, and immediate remediation guidance including network isolation and vendor contact.