TR7 Cyber Defense Inc. WAF-ASP vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting TR7 Cyber Defense Inc. WAF-ASP: 3 record(s), with affected versions and fixes.
CVE-2026-4767
Critical · 9.8
CWE-306 Jul 2, 2026
Improper Access Control in TR7's WAF-ASP
Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. WAF-ASP allows Authentication Abuse.
This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117.
CVE-2026-4772
Medium · 5.4
CWE-79 Jul 2, 2026
Stored XSS in TR7's WAF-ASP
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber Defense Inc. WAF-ASP allows Stored XSS.
This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117.
CVE-2026-4770
Medium · 4.6
CWE-79 Jul 2, 2026
DOM-Based XSS in TR7's WAF-ASP
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber Defense Inc. Web Application Firewall allows DOM-Based XSS.
This issue affects Web Application Firewall: from v1.0.42.239 before v1.4.0.117.