CVE-2026-16740criticalCWE-306

CVE-2026-16740: critical vulnerability in TR7 ASP

Missing Authentication for Critical Function in TR7 Cyber ​​Defense's TR7 ASP

Published

Follow this CVE+ Monitor TR7 ASP

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 1.7%
Missing authentication for critical function vulnerability in TR7 Cyber ​​Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber ​​Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239 before 1.6.1554.2331.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
TR7 Cyber ​​Defense Inc. · TR7 ASP
Related CVEs — TR7 ASP

In the same product, most dangerous first.

CVE-2026-16741CRITICALOS Command in TR7 Cyber ​​Defense's TR7 ASPEPSS 1.7%