Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2026-71379

Toptech TMS7 and TopHAT Files or Directories Accessible to External Parties

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Toptech Systems TMS7

Default version status: unaffected

  • 7.6.3affected
  • 7.8unaffected

Toptech Systems TopHAT

Default version status: unaffected

  • 7.6.3affected
  • 7.8unaffected

References