CVE Intelligence

TR7 Cyber ​​Defense Inc. vulnerabilities

🔔 Create alert RSS

Published CVEs affecting TR7 Cyber ​​Defense Inc. products: 6 record(s), with severity, exploitation and fixes.

WAF-ASP 3TR7 ASP 2Web Application Firewall 1

Exploited only (KEV) →

CVE-2026-16741 Critical · 9.8 CWE-78 Oct 14, 2026
OS Command in TR7 Cyber ​​Defense's TR7 ASP
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TR7 Cyber ​​Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber ​​Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239 before 1.6.1554.2331.
CVE-2026-16740 Critical · 9.8 CWE-306 Oct 14, 2026
Missing Authentication for Critical Function in TR7 Cyber ​​Defense's TR7 ASP
Missing authentication for critical function vulnerability in TR7 Cyber ​​Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber ​​Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239 before 1.6.1554.2331.
CVE-2026-4767 Critical · 9.8 CWE-306 Jul 2, 2026
Improper Access Control in TR7's WAF-ASP
Missing authentication for critical function vulnerability in TR7 Cyber ​​Defense Inc. WAF-ASP allows Authentication Abuse. This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117.
CVE-2026-4772 Medium · 5.4 CWE-79 Jul 2, 2026
Stored XSS in TR7's WAF-ASP
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber ​​Defense Inc. WAF-ASP allows Stored XSS. This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117.
CVE-2026-4770 Medium · 4.6 CWE-79 Jul 2, 2026
DOM-Based XSS in TR7's WAF-ASP
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber ​​Defense Inc. Web Application Firewall allows DOM-Based XSS. This issue affects Web Application Firewall: from v1.0.42.239 before v1.4.0.117.
CVE-2025-2418 Medium · 4.3 CWE-601 Feb 16, 2026
Open Redirect in TR7's Web Application Firewall
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in TR7 Cyber ​​Defense Inc. Web Application Firewall allows Phishing. This issue affects Web Application Firewall: from 4.30 before v1.4.0.117.