CVE Intelligence

Vulnerabilidades de TR7 Cyber ​​Defense Inc.

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de TR7 Cyber ​​Defense Inc.: 6 registro(s), com severidade, exploração e correções.

WAF-ASP 3TR7 ASP 2Web Application Firewall 1

Somente exploradas (KEV) →

CVE-2026-16741 Crítica · 9.8 CWE-78 14/10/2026
OS Command in TR7 Cyber ​​Defense's TR7 ASP
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TR7 Cyber ​​Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber ​​Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239 before 1.6.1554.2331.
CVE-2026-16740 Crítica · 9.8 CWE-306 14/10/2026
Missing Authentication for Critical Function in TR7 Cyber ​​Defense's TR7 ASP
Missing authentication for critical function vulnerability in TR7 Cyber ​​Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber ​​Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239 before 1.6.1554.2331.
CVE-2026-4767 Crítica · 9.8 CWE-306 02/07/2026
Improper Access Control in TR7's WAF-ASP
Missing authentication for critical function vulnerability in TR7 Cyber ​​Defense Inc. WAF-ASP allows Authentication Abuse. This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117.
CVE-2026-4772 Média · 5.4 CWE-79 02/07/2026
Stored XSS in TR7's WAF-ASP
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber ​​Defense Inc. WAF-ASP allows Stored XSS. This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117.
CVE-2026-4770 Média · 4.6 CWE-79 02/07/2026
DOM-Based XSS in TR7's WAF-ASP
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber ​​Defense Inc. Web Application Firewall allows DOM-Based XSS. This issue affects Web Application Firewall: from v1.0.42.239 before v1.4.0.117.
CVE-2025-2418 Média · 4.3 CWE-601 16/02/2026
Open Redirect in TR7's Web Application Firewall
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in TR7 Cyber ​​Defense Inc. Web Application Firewall allows Phishing. This issue affects Web Application Firewall: from 4.30 before v1.4.0.117.