Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-71302

Toptech TMS7 and TopHAT Session Fixation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. This allows an attacker to predefine a session ID and reuse it after victim authentication, resulting in session takeover.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Toptech Systems TMS7

Default version status: unaffected

  • 7.6.3affected
  • 7.8unaffected

Toptech Systems TopHAT

Default version status: unaffected

  • 7.6.3affected
  • 7.8unaffected

References