CVE-2026-16740
Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc
- Risk score
- 79/100
- CVSS
- 9.8 v3.1
- Exploit chance (30 days)
- 1.7%
- Published
- 14 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239 before 1.6.1554.2331.
- Affected
- See advisory
- Fix
- Upgrade the product to 1.0.1554.2331 or 1.6.1554.2331 (whichever matches your release line), or later.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 9.8 critical
- Remotely exploitable without logging in
References
Original description
Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239 before 1.6.1554.2331.
Last activity 14 Oct 2026. Patch Forecast updates every hour.