Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2026-72507

Toptech TMS7 and TopHAT SQL Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The "reportType" parameter in the product summary report feature within the balancing reports section is susceptible to a time-based blind SQL injection vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Toptech Systems TMS7

Default version status: unaffected

  • 7.6.3affected
  • 7.8unaffected

Toptech Systems TopHAT

Default version status: unaffected

  • 7.6.3affected
  • 7.8unaffected

References