p PatchFirst

CVE-2026-16741

CVE-2026-16741 · OS Command in TR7 Cyber ​​Defense's TR7 ASP

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TR7 Cyber ​​Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber ​​Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239 before 1.6.1554.2331.

CVSS 9.8 · Critical · EPSS 1.7% · Fix available

Published
Updated

Affected products and versions

  • tr7 asp

    Versions
    • ≥ 1.0.40.236, < 1.0.1554.2331: Affected (semver)

    Update to 1.0.1554.2331

  • tr7 asp

    Versions
    • ≥ 1.6.42.239, < 1.6.1554.2331: Affected (semver)

    Update to 1.6.1554.2331

Original sources

Check your server →