CVE-2026-16740
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Missing Authentication for Critical Function in TR7 Cyber Defense's TR7 ASP
Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239 before 1.6.1554.2331.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
TR7 ASP
- Vendor
- TR7 Cyber Defense Inc.
- Product
- TR7 ASP
- Platforms
- virtual appliance
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1.0.40.236 | affected | semver | 1.0.1554.2331 | Unavailable | None listed |
TR7 ASP
- Vendor
- TR7 Cyber Defense Inc.
- Product
- TR7 ASP
- Platforms
- physical appliance
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1.6.42.239 | affected | semver | 1.6.1554.2331 | Unavailable | None listed |