A critical vulnerability was found in TR7 Cyber Defense Inc.'s TR7 ASP, affecting versions 1.0.40.236 to 1.0.1554.2331 and 1.6.42.239 to 1.6.1554.2331 on both virtual and physical appliances. This vulnerability allows for OS Command Injection due to missing authentication for a critical function. The issue has a high CVSS score of 9.8, indicating critical severity. Defenders and security teams should as [truncated]
CRITICALTR7 Cyber Defense Inc.CVE published 2026-10-14
A critical OS command injection vulnerability was found in TR7 Cyber Defense's TR7 ASP, affecting versions 1.0.40.236 to 1.0.1554.2330 and 1.6.42.239 to 1.6.1554.2330 on both virtual and physical appliances. This issue allows attackers to execute arbitrary OS commands, potentially disrupting critical services and allowing for lateral movement within the network. Defenders should assess exposure and priori [truncated]
