CVE-2026-16740
Missing Authentication for Critical Function in TR7 Cyber Defense's TR7 ASP
- State
- Published
- Severity
- 9.8 Critical
- Published
- Oct 14, 2026
- Updated
- Oct 14, 2026
- Reserved
- Jul 23, 2026
Description
Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber Defense Inc. TR7 ASP on physical appliance allows OS Command Injection.
This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239 before 1.6.1554.2331.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | TR-CERT |
Weaknesses
- CWE-306 Missing authentication for critical function
Affected Products
| Product | Versions |
|---|---|
TR7 ASPTR7 Cyber Defense Inc. |
|
TR7 ASPTR7 Cyber Defense Inc. |
|
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1327government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.