CVE-2026-16741
OS Command in TR7 Cyber Defense's TR7 ASP
- State
- Published
- Severity
- 9.8 Critical
- Published
- Oct 14, 2026
- Updated
- Oct 14, 2026
- Reserved
- Jul 23, 2026
Description
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber Defense Inc. TR7 ASP on physical appliance allows OS Command Injection.
This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239 before 1.6.1554.2331.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | TR-CERT |
Weaknesses
- CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection')
Affected Products
| Product | Versions |
|---|---|
TR7 ASPTR7 Cyber Defense Inc. |
|
TR7 ASPTR7 Cyber Defense Inc. |
|
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1327government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.