cve.nowby Sazabi
← All vulnerabilities
CVE-2026-16741

OS Command in TR7 Cyber ​​Defense's TR7 ASP

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Fix
Fixed in 1.0.1554.2331, 1.6.1554.2331
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: none
  • Automatable: yes
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TR7 Cyber ​​Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber ​​Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239 before 1.6.1554.2331.

Affected versions

  • TR7 Cyber ​​Defense Inc. TR7 ASP

    From 1.0.40.236 · fixed in 1.0.1554.2331

  • TR7 Cyber ​​Defense Inc. TR7 ASP

    From 1.6.42.239 · fixed in 1.6.1554.2331

References 1

siberguvenlik.gov.tr