CVE-2026-16741
Improper neutralization of special elements used in an OS command ('OS command injection')…
- Risk score
- 79/100
- CVSS
- 9.8 v3.1
- Exploit chance (30 days)
- 1.7%
- Published
- 14 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7…
- Affected
- See advisory
- Fix
- Upgrade the product to 1.0.1554.2331 or 1.6.1554.2331 (whichever matches your release line), or later.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 9.8 critical
- Remotely exploitable without logging in
References
Original description
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239 before 1.6.1554.2331.
Last activity 14 Oct 2026. Patch Forecast updates every hour.