Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-16740

Missing Authentication for Critical Function in TR7 Cyber ​​Defense's TR7 ASP

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TR-CERT

Description

Missing authentication for critical function vulnerability in TR7 Cyber ​​Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber ​​Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239 before 1.6.1554.2331.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TR7 Cyber ​​Defense Inc. TR7 ASP

Default version status: unaffected

  • 1.0.40.236 to < 1.0.1554.2331affected

TR7 Cyber ​​Defense Inc. TR7 ASP

Default version status: unaffected

  • 1.6.42.239 to < 1.6.1554.2331affected

References